{0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 515.975045] x86/PAT: syz-executor5:21629 map pfn RAM range req write-combining for [mem 0x177860000-0x177863fff], got write-back 04:35:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c82, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 516.409177] x86/PAT: syz-executor5:21662 map pfn RAM range req write-combining for [mem 0x17b2e0000-0x17b2e3fff], got write-back 04:35:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x5451, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x5450, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x5421, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x500}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 516.809650] x86/PAT: syz-executor5:21692 map pfn RAM range req write-combining for [mem 0x17ab40000-0x17ab43fff], got write-back 04:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x40049409, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 517.129791] x86/PAT: syz-executor5:21722 map pfn RAM range req write-combining for [mem 0x17ca50000-0x17ca53fff], got write-back 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x5460, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) getsockname$llc(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000440)=0x10) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) syz_open_dev$media(&(0x7f00000007c0)='/dev/media#\x00', 0x101, 0x440000) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @remote}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000580)={r5, 0xffffffffffffffff, 0x7, 0x1}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) ioctl$TIOCSTI(r7, 0x5412, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab01000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745e7065726d697373696f6e732c646566b6df5027112d8b8ff97ba161756c745f7065626d697373696f6e732c700e0efc55dfc7ec099c39195263723d30303030303030303030303030303030303033382c66756e633d4649", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) flistxattr(r2, &(0x7f00000007c0)=""/54, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) r8 = getpid() setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={r8, r0, r1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab010000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x800, &(0x7f0000000a00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl(r3, 0x8000000000009374, &(0x7f00000000c0)="0100000000000000180400000001000000555d040f45426d0270ec78dfd849832f") ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r8 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000007c0)=0x100) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='7p\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f740ffa909ad08be300096226137440006d30002c66756e725bae934724c2e262c1a2e4fdaf5850b3774263ea5b19163a9d3ba5999cfbb7594a5a00319d000000000000"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000840), 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000007c0)=0x4, &(0x7f0000000800)=0x2) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) write$FUSE_OPEN(r7, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000007c0)={{0x3, @name="e550f187df60df406156703a7e94ec091ecbc9a5c902080192224917a691455e"}, 0x8, 0x3f, 0x7fffffff}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x485, 0x5]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r2}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_lt={'fowner<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r9, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) r10 = add_key(&(0x7f0000000800)='big_key\x00', &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r11 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r10, 0x7, 0x0, r11) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) 04:35:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r3, &(0x7f0000000040)=0x100000, 0x8001) 04:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f743d66756e633d504154485f434845434b2c00000000d2250000eccaa5337e2d6829eea5d82a32f6397508aca0616a56402423bf5467d6302c0048b9325d4134abfc50cc7f53c5aff8ea20ebb15d2c506dcec49a7b67e616b87070f9dd4e15b0d5f2bc07d7b6547f90979262129cdc7bc110059b5e740b074474d48e14757306f2590cf18114f01fc948c6c0a9ca35548583ee87ac39e8666fb0fc94b89a0100010000000000895a64b051176ce2b5663b64c4c48246f4a7de781616ed3e7c98b63711f2d40fe5582fb467b9ab436e32efbe28c7d9a3046bd731f350f311f23c"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 520.912282] x86/PAT: syz-executor5:21998 map pfn RAM range req write-combining for [mem 0x180420000-0x180423fff], got write-back 04:35:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={0x0, r0, 0x0, 0x7, &(0x7f0000000800)='blksize', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, r0, 0x0, 0x3, &(0x7f0000000880)='%%\x00', 0xffffffffffffffff}, 0x30) sched_setattr(r4, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0x1ffff}, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c666f716e65913c2278b17bdee241afbdf107cc93f358441fb71cbe79e4dde2fbe5ee742838fbe3e5068a8039081f15925a6f5d84efdd0bfe", @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800, 0xe86}, &(0x7f0000000c00)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x100000, 0x8001) 04:35:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000140)=""/18, 0x12}], 0x2, &(0x7f0000000800)=""/173, 0xad, 0x81}, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 521.199259] x86/PAT: syz-executor5:22020 map pfn RAM range req write-combining for [mem 0x17d8e0000-0x17d8e3fff], got write-back 04:35:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040), 0x8001) 04:35:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040), 0x8001) [ 521.520214] x86/PAT: syz-executor5:22042 map pfn RAM range req write-combining for [mem 0x17fbb0000-0x17fbb3fff], got write-back 04:35:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000c00)={"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"}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',roosmode=0 0000id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x800, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x40006, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030010000003030303030303030303036303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f70659d623bdd5dcf10996ab400726d697303696f6e732c70303030303030303030303030303030303033382c666f776e65723e00000000", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000580)={0x5, 0x0, [{0x0, 0x200, 0x1ff, 0x7fffffff, 0x5}, {0x8000000f, 0x10001, 0xc80, 0x8, 0x800000000}, {0x1, 0x6a1, 0xbf0, 0xda86, 0xaa4}, {0x40000000, 0x6, 0x2, 0x1, 0x7}, {0xc0000000, 0x815, 0xfffffffffffff801, 0x1, 0x7}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0xfffffffffffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 521.771732] x86/PAT: syz-executor5:22060 map pfn RAM range req write-combining for [mem 0x1d1790000-0x1d1793fff], got write-back 04:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040), 0x8001) 04:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 522.158400] x86/PAT: syz-executor5:22087 map pfn RAM range req write-combining for [mem 0x1806d0000-0x1806d3fff], got write-back 04:35:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB="2c736d9086e9d861636b6673726f6f743d7465616d30002c66756e633d504154485f434845"]) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000007c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x0) 04:35:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 522.376514] x86/PAT: syz-executor5:22107 map pfn RAM range req write-combining for [mem 0x17cf70000-0x17cf73fff], got write-back 04:35:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x0) 04:35:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0xf, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 522.702763] x86/PAT: syz-executor5:22128 map pfn RAM range req write-combining for [mem 0x17bf40000-0x17bf43fff], got write-back 04:35:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x0) 04:35:18 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000700)='/dev/adsp#\x00', 0x612, 0x1) r1 = getuid() getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x800000, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}], [{@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000b00), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000b40)={0x1, 0x1, [0x10001, 0x9a, 0x7f, 0x3, 0x400, 0x6, 0x8, 0x2]}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000ac0)={0x3}, 0x1) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c667f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000002c0)={r8, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r9 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r10, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 523.085336] x86/PAT: syz-executor5:22152 map pfn RAM range req write-combining for [mem 0x17bc80000-0x17bc83fff], got write-back 04:35:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66643d23e25e9aceedad7db22880b39b14c52ffe4b0f16a97bd24c93bf73ecf5b8f6d61012ad7cccb410ba3dacb70452a2a51081fc0bd425b7d6ded5142fb696ace3757dd2e5c8898120bd3d054244eaa7a2836d9a27f6b9a338d612fed8cdecb2a6066c942e71e809262da0e60b197220d8100cfc28150e7c1de1df3d5c45456c6bff5846a006c546d6057457d85aeb72c9289ac3d48753381ae9c57a1c205aeb21939d66588d5e0927969635013581371a977800000000000000000000", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f743d7465616d30002c66756e633d504154485f434845434b2c0029d0c13cc216c0c8366d1713a8c7d8b57d1943fb0a57fed9a4e3abc89e6463cd6cda836693675f6b0b5a9c98ea90e6132d11317f6b54032c6e63f03d38f9199443715bcaa78ca44173eedf805097"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f64653d30303030303030303030303030303030303030303030302c757365725f69643d9e8665f34a119e98f2764dcd1d36b1c4860c49a44f09b19ff2adcf682e82ea9aaf8f7fa3fe7f0d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='f\b=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB="0000000000000000188d9dbe6edd887d37a2814ac9cd45ab455dd5c47b3824c93e1c08995c7e4702d0c258ad521278fa5ad7b986912c42d711100c9a55dfc6ff09b2ef9593282fd6777f25ad9173db3092d90bb9932bd7f3686bc49a3b1e4a1b47e92b3be99511c0730233bc77fb8afaa5f467f6427c6d761000e9b429a06e6aa285afef004ef04e657de1e01af78e19fcb7c182e5ec08ed512593aae0565b9463b26659a1ea753dadbe391db5de4778a1e1fbcf08b8a3b229e4", @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xdb66) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r5}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000c00)={"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"}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',roosmode=0 0000id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x800, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="057f4e48f8c409d8101a", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000800)={0x7, 0x8001}) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9916, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="e61eb1d5bc8d1bb64706eb013f19caad7f2168676fdb6bff6f7088a05226b3bcef16c9a23ec1d159a60fac0a5428527aceec68762c991afaef17390db12df76f7dde0fa7f0a44252c226a3209debb97db91b92710b14ebb0141f50f9d0dcf125c5394e0ba08c6900a010b19d6109719c1842d9f565a36704729539eb6aec4bf4756de835041ab5518384ee41fe677e7dbc21fc51fd6ee37e9a8a01636d10ebbe7e5e6e15c10e8d68897b7388544106dcb5a3cc83631bd73967646ff8cd73eb41b589a30a6d5035a05b288e05dd78b9116b42af1cd897cb4bccb9ede2fc", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="02032cbc3facb9dbdf250200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x0) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000c00)={"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"}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',roosmode=0 0000id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x800, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x4a8, 0x140, 0x280, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000007c0), {[{{@arp={@loopback, @multicast1, 0xffffffff, 0x0, @empty, {[0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, 0x3, 0x3, 0x3, 0x7fffffff, 0x6, 0x80, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0xc}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="a9cac39af83d", @empty, @rand_addr=0x3, @multicast2, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, 0xd, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @broadcast, @broadcast}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x10000000000000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c62f8316caaf4fe560478303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c7063723d30303030303030303030303030303030303033382c66752c7569643c", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d71636b6673726f6f743de88573ca30301f5415f65d04084ac4591a132440002c6675"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000640)=0x84) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000400)) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @rand_addr, @local}, &(0x7f0000000d00)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xf, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="809905000e0b000a"], &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x89, &(0x7f0000000c00)=""/137, 0x41100, 0x1, [], r6, 0x7}, 0x48) renameat2(r5, &(0x7f0000000800)='./file0\x00', r3, &(0x7f0000000840)='./file0\x00', 0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000007c0)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) utimensat(r3, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000c00)={"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"}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',roosmode=0 0000id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) socket$inet(0x2, 0x800, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000700)={{0x6f, @empty, 0x4e22, 0x1, 'nq\x00', 0x4, 0x58785791, 0x16}, {@loopback, 0x4e21, 0x10000, 0xffffffffffff0000, 0x4, 0x7ff}}, 0x44) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000d40)={0x0, 0x51, "440cf99ca66b2f3dba56b6f4a748da17d7d1b6c28c989777b965405be050de7ef19ce4e3c4e04586c3d59d407891ad11b37249446c1aecd18640dccd36505faa085804475f4529ba306c1911062784460e"}, &(0x7f0000000dc0)=0x59) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000e00)=@sack_info={r4, 0x3d1dfd93, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000007c0)=@sack_info={0x0, 0x800000000, 0x1000}, &(0x7f0000000800)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={r5, 0x6b, "567327f0ba24f50c059f45cfb96179530ab2244bef8f5fb5ce4253524a7383ada2ef37290036083565ebd9726dfdb6bdfabc60470ec34e28d46389ade9df6d0dc82e4137c5117dd2f9f527231ad3d2a73d90e5363b2d0fe5de27d27648273ac78aa035f3cf74583f344f5f"}, &(0x7f00000008c0)=0x73) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PQTH_CHEg\a,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r7 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001000)={r4, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x4000000000000000}}}, &(0x7f0000000e40)=0xffffff7c) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000c00)={0x1, {{0x2, 0x4e22, @rand_addr=0xffffffff00000000}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getgroups(0x9, &(0x7f0000000140)=[r1, r1, r1, r1, r1, r1, r1, r1, r1]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f743d7465616d30002c66756e63a1474154485f434845434b2c00"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000700)={r5, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x2, 0x5, 0x3cd, 0x10}, 0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x4a8, 0x140, 0x280, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000007c0), {[{{@arp={@loopback, @multicast1, 0xffffffff, 0x0, @empty, {[0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, 0x3, 0x3, 0x3, 0x7fffffff, 0x6, 0x80, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0xc}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="a9cac39af83d", @empty, @rand_addr=0x3, @multicast2, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, 0xd, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @broadcast, @broadcast}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000800)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) setsockopt$packet_buf(r5, 0x107, 0x1f, &(0x7f00000007c0)="b09a985a7f1f4ed411b4adc3", 0xc) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000580)=0xffff) syz_mount_image$ext4(&(0x7f00000008c0)='ext3\x00', &(0x7f0000000940)='./file0/file0\x00', 0x8863, 0x5, &(0x7f0000000b40)=[{&(0x7f0000000a00)="35ef986c7c414fb587494c1153e716c964db7fc89bbe3fdc09fbf60f6d431587d9cda1fa47c1128684d79517221e217da2ba8ddd6cc04d03935178e6106178c2c24baa8f20ff4b4b08cc918120878a3be547b5474c9b83acb6ac838dac2b79709c7f23c4723b3547973212b53a657621e0292c08f6293d317dd341ed216158ec63e622e9eefdc8d21f471c86ecaf635126a8219cc529fc2ddd7e9a50fd919a70036d3500fd60720f838c4d82957537502017671a57ef1b340e125b8b81fdf7552663fc8267e3a4f71156def0215c4bb26a7146227c0ce50bdd952212d181cfdb5a377ee91b3507c632bc48", 0xeb, 0x5}, {&(0x7f0000000c00)="5341faccbd5ccbfec8e6f7da3a18e1179213da04c1fd03ef80cfb8657010ac90a6f8cf2c909fd2f0fdf2e8030b621e4d8787fd805936aee176ca32c239f8b9f364f35ac4c5fc2af181513f0721f3c795675dad44e6dae71fa22fb886e7e944394784ae6b54f17202b939eb30ad3ba03a33a3ed429c86a45f52abcc69f2c2606c979e072fbc7986b60f1a06ae2e4e8c6ee13031850ba9f101dfa495b4d45b7ac3d3963251cc7915de67296a1768109395ec2494a7d11d821b86398f308afa880300ff99f67d0a6daa7a8e40e9b463f6b99a405dd4fecfc368c099d9b0dde1298d2879a497d135075528", 0xe9, 0x1}, {&(0x7f0000000b00)="98a2f3b950c30b61f6f3399471f53936a9a9f8d1ad5b257a816d7254f70583dbe531fa9dee06f8", 0x27, 0x8001}, {&(0x7f0000000d00)="aef83b83e1d29c2a1c8fcd0354c2d7b4743b833ea19c2b2564ff9432f5bbf6ae3ce945d2ba84fbe20d1faf7cebe17fad8dbd85f34fb1f06cb379e41797b029844963cf925fd9dfdd4a81509b711dd8dca5c3c6fe21db3bbf140c2001f912161f03ce612d1fa6819b6ebfeee2f0cb8f0266df6019b640501bcd3239282cd009194b4ef07f889ffa69e7ef050e7697a72553f3957d9dd446a66088b1f4534d5749dd39bf175487ca05a8326509a02779acc8733bcf3d143d805fb5f4b70a95", 0xbe, 0x1f}, {&(0x7f0000000dc0)="0456e1fb329d40c74b7717776c69f07c23dc1536a7e342c98ec35dccefe62e41a6b2f484d40574626e36a7096ae131e773fd17e2aaa4171ceaf53c2016d1fc18532e5de64c3bd127514015dbdf7af3287b1b3eeb19b5bf331ed7f14868497e324e383681630e4ff27497571f4d99ed404408b927a1f431cbd3ef8789424f1aafb952aa541e2f79c8bc972467908f62c95fac03e6c1ab1eae7ed575f0569df3cb39b1fd", 0xa3, 0x1}], 0x1000000, &(0x7f0000000e80)={[{@nogrpid='nogrpid'}, {@debug='debug'}, {@noinit_itable='noinit_itable'}], [{@obj_user={'obj_user', 0x3d, 'measure'}}, {@smackfshat={'smackfshat', 0x3d, 'ð0bdev'}}, {@obj_role={'obj_role', 0x3d, 'allow_other'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'pcr'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup{'}}, {@smackfshat={'smackfshat', 0x3d, ',\'\''}}, {@fowner_eq={'fowner'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x35, 0x0, 0x30, 0x3a, 0x64, 0x33, 0x77], 0x2d, [0x32, 0x75, 0x7b, 0x66], 0x2d, [0x0, 0x38, 0x77, 0x39], 0x2d, [0x77, 0x75, 0x75, 0x64], 0x2d, [0x71, 0x3d, 0x67, 0x75, 0x38, 0x66, 0x61, 0x63]}}}]}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000440)='fuse\x00', 0x100000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x314b}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x7f, 0x77, 0x66, 0x33, 0x0, 0x33, 0x33], 0x2d, [0x3f, 0x37, 0x37, 0x76], 0x2d, [0x7f, 0x77, 0x65, 0x66], 0x2d, [0x77, 0x30, 0x62, 0x62], 0x2d, [0x65, 0x31, 0x37, 0x76, 0x33, 0x35, 0x65, 0x7b]}}}, {@measure='measure'}, {@obj_type={'obj_type'}}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, ',\'\''}}, {@smackfshat={'smackfshat', 0x3d, '}GPL'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000d40)={0x0, 0x51, "440cf99ca66b2f3dba56b6f4a748da17d7d1b6c28c989777b965405be050de7ef19ce4e3c4e04586c3d59d407891ad11b37249446c1aecd18640dccd36505faa085804475f4529ba306c1911062784460e"}, &(0x7f0000000dc0)=0x59) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000e00)=@sack_info={r4, 0x3d1dfd93, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000007c0)=@sack_info={0x0, 0x800000000, 0x1000}, &(0x7f0000000800)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={r5, 0x6b, "567327f0ba24f50c059f45cfb96179530ab2244bef8f5fb5ce4253524a7383ada2ef37290036083565ebd9726dfdb6bdfabc60470ec34e28d46389ade9df6d0dc82e4137c5117dd2f9f527231ad3d2a73d90e5363b2d0fe5de27d27648273ac78aa035f3cf74583f344f5f"}, &(0x7f00000008c0)=0x73) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PQTH_CHEg\a,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r7 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001000)={r4, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x4000000000000000}}}, &(0x7f0000000e40)=0xffffff7c) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000c00)={0x1, {{0x2, 0x4e22, @rand_addr=0xffffffff00000000}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2ccf4d6f75705f696ba7538283874bc0a50633f1ac395d", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000f80)) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) syz_mount_image$erofs(&(0x7f00000005c0)='erofs\x00', &(0x7f0000000600)='./file0\x00', 0x9, 0x5, &(0x7f0000000e80)=[{&(0x7f0000000640)="77b0e6466945fdf2665c30c24169d3a3559b69fedb50fe48d55e3454a241f818d1732b0fb1d412759000016814110bb15d8aaf323a53326f91615338a6e5755ee1ee6ccbaa944c73f246997175968a2ace9e7babcf", 0x55, 0x2}, {&(0x7f00000007c0)="53d09170164a9000655fd8002434e378159f77322a27467ac1a1d6e9762a3e70e752dcb419bcb9c581be4655765b27e14ef254ee3cb066f55071b2e29a599ade9bf68b29b3f842c2f9f0a2203c6213acb94197553d5769837c2874c78427977c08371a71c5ab41fffaf9de8ad15a12893ce6f21162c17371b0248c1e2180c7a3462a76c5dd94aab0ea8d1b5e8d7413", 0x8f, 0x5}, {&(0x7f00000006c0)="0a92f301e826307cbdbb7b12175df8ca4d94d0229fff9384ed831993654936857fa56b2be221a0133f8b5c8b651628a6df75f778f76a7812198b0b97e840f3e94afdc67460aa0c08ba66a96ff15b90db7c4c171d1712b4182428d6e75d060cf2a2de14ef006760c4cdd94d42cdda", 0x6e, 0x7fff}, {&(0x7f0000000880)="d2a901a864d6b9f55d598b5cdb0b5860bc53ffb7b970b5d9f5635f1fb8d97b13dbc48f7a433fd0ca8d4df54d43e370b16f2fc410c9d6765778dfd26ced2dbf20b6847ab6e718c9b41418d2e1989b84fa025367355d0b08cc74c5", 0x5a, 0x7fffffff}, {&(0x7f0000000dc0)="588648a2c59f528dd952b87cb7f648bdcf68d47ba3f488383ab350d8f0d2db86695f609c0eaa66773836f7d633aa481db898c8cef52118bcbe934b47330b500006787f826aa865e6ee5042eed3a4399b47f09e9a12c0d590c18bb4dcdf24652d6b63006ec4a747646cc21936dde7d7e93011cadaed2c4652eed24ce49fa887be9144e5e4cfafb6b6022ad56794b71b53261f3cd4b6f2390c2312e267c390860e4221e52276f3778324ae602c338e274b42a07da82d216c0a606e509c59612567", 0xc0, 0xda}], 0x80, &(0x7f0000000f00)={[{@fault_injection={'fault_injection', 0x3d, 0xa313}}, {@acl='acl'}], [{@measure='measure'}, {@subj_type={'subj_type', 0x3d, 'fuse\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000fc0)=""/48) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="47bc8ba1a891ffe3842c736d61636b6673726f6f743d7465616d30002c66756e633d504154485f434845434b2c00a748622c8ce6ee7a063b8382d222ba58b491f2c8193039462f05e85bc59b87ecd3093e5fb19616141d6d0a5a584cb07bb4f2d6064de54b5124d20c4578afd4468bf2b0394c081eea3be70acf9676b270ff80c4aaceeb0c004db27146148b594df89c011f9455dba0578d235a03f9efaae9583899e0997fd38e90f20fb04ebc44739d143e616471adfa0b66343d578e762606172c252f6dfe3b80ec0ec0b5f0716f5925d76ef3fb444ac53647393fd6aa9fda9bb2ce3a16f5f50b2b9bbe934794"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000700)=""/167, &(0x7f0000000140)=0xa7) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000_MMAP,uid<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2c67726f75705f69643d5f7e65d44c1fa72fd8ded896b02456112c09ead8aaec96eb318ab1767df4891395506d5f67db57343946560215dfed06255ea594e5325acf6fcb88593821ea442daba860dfcdda1349e52d75813902015c853185b54e0cdc33217862682b9471aad65da7c7ab58e228dd036e5731f18820a6aaf02247848d7b8f48f8bf3a53d6f97d615c6303d1a8a1ddae1d4386d9a12968eb813a34e78b69735a3598a5380633827a031ce29aa7370ec955696ffc1c19d83f4c1a32e22ae17091771e337fc1195ca413c8cfd7011efbaabdd540bbca018eea52d2f6ae1461146ee88a01189a83252fe727757d1dbca7d4c6", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772c1010024166f75025f6964e79f67ff68a07a18fb3dd52d47d43a00000c0100000013db482cd4020fd33bd61a06b84e6ceba2c6d345691b24c3448f00c9d0e4e80c37a59150b4a79d71f9c83237e24df9ba92d0ff396b706b4ea6b92eaa84d8802747d5145ededa2a324c4f1bcd0dd3dbfa05e79af1c61723e759ed00000000", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0xffff, 0x200040) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000440)={r8}) 04:35:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',ner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000440)={r5}, 0x8) r6 = socket(0x8, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={r3, 0x3, 0x1, 0x81, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r8 = semget(0x1, 0x0, 0x1) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x0, 0x9}) semctl$GETPID(r8, 0x0, 0xb, &(0x7f0000000700)=""/93) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r9 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000780)={0xffffffffffff651e, [0x3, 0x6, 0x1, 0x80, 0x7000, 0x81, 0xfffffffffffffffb, 0x100000001, 0xfffffffffffffff7, 0xffffffff00000001, 0x10000, 0x8, 0x400, 0x8000000000, 0x400, 0x2, 0x3, 0x693, 0x3c, 0x6, 0xffffffffd84dfc8a, 0x8, 0xff, 0x200, 0x3, 0xfff, 0x3, 0x2, 0x100, 0x1, 0x1ff, 0xda50, 0x1, 0x6, 0x3, 0xa7d9, 0x8, 0x7ff, 0x4, 0x4e0d, 0x1000, 0x7ff, 0x7, 0x0, 0x80, 0x2, 0xffffffff00000000, 0x81], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000580)=0xffff) syz_mount_image$ext4(&(0x7f00000008c0)='ext3\x00', &(0x7f0000000940)='./file0/file0\x00', 0x8863, 0x5, &(0x7f0000000b40)=[{&(0x7f0000000a00)="35ef986c7c414fb587494c1153e716c964db7fc89bbe3fdc09fbf60f6d431587d9cda1fa47c1128684d79517221e217da2ba8ddd6cc04d03935178e6106178c2c24baa8f20ff4b4b08cc918120878a3be547b5474c9b83acb6ac838dac2b79709c7f23c4723b3547973212b53a657621e0292c08f6293d317dd341ed216158ec63e622e9eefdc8d21f471c86ecaf635126a8219cc529fc2ddd7e9a50fd919a70036d3500fd60720f838c4d82957537502017671a57ef1b340e125b8b81fdf7552663fc8267e3a4f71156def0215c4bb26a7146227c0ce50bdd952212d181cfdb5a377ee91b3507c632bc48", 0xeb, 0x5}, {&(0x7f0000000c00)="5341faccbd5ccbfec8e6f7da3a18e1179213da04c1fd03ef80cfb8657010ac90a6f8cf2c909fd2f0fdf2e8030b621e4d8787fd805936aee176ca32c239f8b9f364f35ac4c5fc2af181513f0721f3c795675dad44e6dae71fa22fb886e7e944394784ae6b54f17202b939eb30ad3ba03a33a3ed429c86a45f52abcc69f2c2606c979e072fbc7986b60f1a06ae2e4e8c6ee13031850ba9f101dfa495b4d45b7ac3d3963251cc7915de67296a1768109395ec2494a7d11d821b86398f308afa880300ff99f67d0a6daa7a8e40e9b463f6b99a405dd4fecfc368c099d9b0dde1298d2879a497d135075528", 0xe9, 0x1}, {&(0x7f0000000b00)="98a2f3b950c30b61f6f3399471f53936a9a9f8d1ad5b257a816d7254f70583dbe531fa9dee06f8", 0x27, 0x8001}, {&(0x7f0000000d00)="aef83b83e1d29c2a1c8fcd0354c2d7b4743b833ea19c2b2564ff9432f5bbf6ae3ce945d2ba84fbe20d1faf7cebe17fad8dbd85f34fb1f06cb379e41797b029844963cf925fd9dfdd4a81509b711dd8dca5c3c6fe21db3bbf140c2001f912161f03ce612d1fa6819b6ebfeee2f0cb8f0266df6019b640501bcd3239282cd009194b4ef07f889ffa69e7ef050e7697a72553f3957d9dd446a66088b1f4534d5749dd39bf175487ca05a8326509a02779acc8733bcf3d143d805fb5f4b70a95", 0xbe, 0x1f}, {&(0x7f0000000dc0)="0456e1fb329d40c74b7717776c69f07c23dc1536a7e342c98ec35dccefe62e41a6b2f484d40574626e36a7096ae131e773fd17e2aaa4171ceaf53c2016d1fc18532e5de64c3bd127514015dbdf7af3287b1b3eeb19b5bf331ed7f14868497e324e383681630e4ff27497571f4d99ed404408b927a1f431cbd3ef8789424f1aafb952aa541e2f79c8bc972467908f62c95fac03e6c1ab1eae7ed575f0569df3cb39b1fd", 0xa3, 0x1}], 0x1000000, &(0x7f0000000e80)={[{@nogrpid='nogrpid'}, {@debug='debug'}, {@noinit_itable='noinit_itable'}], [{@obj_user={'obj_user', 0x3d, 'measure'}}, {@smackfshat={'smackfshat', 0x3d, 'ð0bdev'}}, {@obj_role={'obj_role', 0x3d, 'allow_other'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'pcr'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup{'}}, {@smackfshat={'smackfshat', 0x3d, ',\'\''}}, {@fowner_eq={'fowner'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x35, 0x0, 0x30, 0x3a, 0x64, 0x33, 0x77], 0x2d, [0x32, 0x75, 0x7b, 0x66], 0x2d, [0x0, 0x38, 0x77, 0x39], 0x2d, [0x77, 0x75, 0x75, 0x64], 0x2d, [0x71, 0x3d, 0x67, 0x75, 0x38, 0x66, 0x61, 0x63]}}}]}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000440)='fuse\x00', 0x100000, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x314b}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x7f, 0x77, 0x66, 0x33, 0x0, 0x33, 0x33], 0x2d, [0x3f, 0x37, 0x37, 0x76], 0x2d, [0x7f, 0x77, 0x65, 0x66], 0x2d, [0x77, 0x30, 0x62, 0x62], 0x2d, [0x65, 0x31, 0x37, 0x76, 0x33, 0x35, 0x65, 0x7b]}}}, {@measure='measure'}, {@obj_type={'obj_type'}}, {@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, ',\'\''}}, {@smackfshat={'smackfshat', 0x3d, '}GPL'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x0, 0x3, &(0x7f00000007c0)='pcr', 0xffffffffffffffff}, 0x30) sched_setattr(r4, &(0x7f0000000000)={0x20000000000000, 0x6, 0x0, 0x0, 0x0, 0x409917, 0xffff, 0xb2}, 0x0) ftruncate(r0, 0x5) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r1}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) r6 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r0, r6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) connect$unix(r4, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETLINK(r4, 0x400454cd, 0x102) 04:35:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',ner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000440)={r5}, 0x8) r6 = socket(0x8, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={r3, 0x3, 0x1, 0x81, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r8 = semget(0x1, 0x0, 0x1) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x0, 0x9}) semctl$GETPID(r8, 0x0, 0xb, &(0x7f0000000700)=""/93) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r9 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000780)={0xffffffffffff651e, [0x3, 0x6, 0x1, 0x80, 0x7000, 0x81, 0xfffffffffffffffb, 0x100000001, 0xfffffffffffffff7, 0xffffffff00000001, 0x10000, 0x8, 0x400, 0x8000000000, 0x400, 0x2, 0x3, 0x693, 0x3c, 0x6, 0xffffffffd84dfc8a, 0x8, 0xff, 0x200, 0x3, 0xfff, 0x3, 0x2, 0x100, 0x1, 0x1ff, 0xda50, 0x1, 0x6, 0x3, 0xa7d9, 0x8, 0x7ff, 0x4, 0x4e0d, 0x1000, 0x7ff, 0x7, 0x0, 0x80, 0x2, 0xffffffff00000000, 0x81], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="12a6df3188459a16fcb510bad6311552f6c016354b43ad04ce9dd8ca0c05cca5b9052cd15913bde5edaa6074d76a9132f8949f55b50a8ea6ada14d6e3880caf1c5a821926751cc4aec719540cb83274e02083e2df78fb9c92f6ef87831dfaada6b5aa274edf68c46a3f15433245f66a03e55", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x701080, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000600)=""/79) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) setxattr$security_evm(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='security.evm\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB="040513cb87dbbde2d1f4c2ab44c050cc105323483355d8a388cf6ce70b7c9ad4e544d384f1ea174e1777daf0b0277a4a43396b873877f570cd7d66bfd2ee81cf746d79e79f9641e9a50082509eaa94bda50deff5003e073430edae7cdbdfbd012cd2b873d2adf32dc021a80e20bd690a9207429751f9c267ef3531aa93239321c7f34bfa4d49c72685b136513a92bfa4846db4bd263fc733719932c497b20cac507c8509d3023250d59f007f20bbd7c59499772a1e84f4d6948939577a1591c35d3202616fe543dfacf405a915246772f318658239e17249b7858e2f6f85e5e199f9dba2733e4a215061d817473ca88266361aab66dd5c1e74a0493dbc7859e8d7104fdb086c649ea730886a5ce9f07b9a7874c406b45432ee014c5212e43f0617fd6c44792c5439de59a7e02d12458ed8240505fb7045c02f755182416cb41c93db5bac5c517c5e24282bbd732799c82892c42a0efd2df54b9e0a69b1543fb4e5624c"], 0x8, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="0057d836302ee12b990000000000", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB="2c6566636f6e746578746e636f6e66696e65253cfd56628062d783b8b83f", @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0xb1, "276f8df8100a958b679459b72e74e200b12fdae33b9a9ebb2787820165b57ba8dac340b96e8b896a6e78196a0d42ab5e51bcfce7045eb9d8bf3c4dc75d121de2ff4906166830a202b59b940beee64d7994f91d7aced43c41740101e339f2a63eb44c6cc9c5032d0f89db1342db043ce79cff8d4f22701021702a5ba78c2cf7f2f8077f7e22724cee1487f060c795eeeec343253fe46c9b77d752882650b88d894fe8a1cacab09425f9d14a6c288182c721"}, &(0x7f0000000680)=0xb9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1ff, 0x3f, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x2, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB='^.h`ner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000440)={0x2000000, 0xffffffff00000000, 0x10000, 0x0, 0x32}, 0x14) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0xe, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',ner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000440)={r5}, 0x8) r6 = socket(0x8, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={r3, 0x3, 0x1, 0x81, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r8 = semget(0x1, 0x0, 0x1) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x0, 0x9}) semctl$GETPID(r8, 0x0, 0xb, &(0x7f0000000700)=""/93) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r9 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000780)={0xffffffffffff651e, [0x3, 0x6, 0x1, 0x80, 0x7000, 0x81, 0xfffffffffffffffb, 0x100000001, 0xfffffffffffffff7, 0xffffffff00000001, 0x10000, 0x8, 0x400, 0x8000000000, 0x400, 0x2, 0x3, 0x693, 0x3c, 0x6, 0xffffffffd84dfc8a, 0x8, 0xff, 0x200, 0x3, 0xfff, 0x3, 0x2, 0x100, 0x1, 0x1ff, 0xda50, 0x1, 0x6, 0x3, 0xa7d9, 0x8, 0x7ff, 0x4, 0x4e0d, 0x1000, 0x7ff, 0x7, 0x0, 0x80, 0x2, 0xffffffff00000000, 0x81], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="667f3d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c646566616f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c746661756c745f7065726d697373696f6e732c7063723d17303030303030303030303030303030303033382c66756e633d46494c455f4d4d41502c7569643c000000000000000000000000", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x81, @local, 0x7ff}}}, &(0x7f0000000800)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000007c0)=0xcf6d, 0x4) 04:35:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet6(0xa, 0xa, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000007c0)={'team_slave_1\x00', 0xd000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c757365725f69643d721c1b4ce79672f659e2a149f267b8cc7e2e6d054da3e4b22ebce77d97c32236c9fb676995b17ec44973b4007af911d12f4f57107ca85f6eb902dc6a5965365f9b49887985a49798e3d695857d03a97e320b6360b58ceee27e9f256da53ea51a745ea3a8d6ebad2ff3ac5d9a3018e821e2c3a3fc3954c9259f62dc5b449bc7a34339ee10a2a60f3a12aff068c3a65633f184f5d34224012b8bcc", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f743d7465616d30002d66756e60a5fe9296a46d72c5633d504154"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1d, &(0x7f0000000700)=""/100, &(0x7f0000000780)=0x64) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d30783030303030303001000000000000007065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c7030303030303030303030303030073033382c66756eb9a5dc05272b57664d41502c7569643c000000000000", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB='<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x0, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x0, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="67643d23e74f20b061ec7061a9d4ad20ac2b43086691446b6bb2d250fd7b542a7deec850b06ed5a70b72c4db68026dc5a15d40c2413d103ccd2d1b266fc441457ba4dd218201254c7d5ddf563c478ae6acfbc6111b41f48c22278081ccf7939441db615112c1eccde9b4983299a410526810cea65bb574b0b6bf71573232102624d01b3b15346847f8f897c26016", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) lsetxattr$trusted_overlay_nlink(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'U-', 0xd6}, 0x28, 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) process_vm_readv(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000a00)=""/220, 0xdc}], 0x5, &(0x7f0000000c80)=[{&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000c00)=""/35, 0x23}, {&(0x7f0000000c40)=""/1, 0x1}], 0x4, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2, 0x0) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="b5bb992c67726f75705f69643d", @ANYRESDEC=r2, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830012c64656661756c745f7065726d697373696f6e732c7063723d30303030303030303030303030303030303033382c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000440)=0x7ff, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2c67726f75705f69643d5f7e65d44c1fa72fd8ded896b02456112c09ead8aaec96eb318ab1767df4891395506d5f67db57343946560215dfed06255ea594e5325acf6fcb88593821ea442daba860dfcdda1349e52d75813902015c853185b54e0cdc33217862682b9471aad65da7c7ab58e228dd036e5731f18820a6aaf02247848d7b8f48f8bf3a53d6f97d615c6303d1a8a1ddae1d4386d9a12968eb813a34e78b69735a3598a5380633827a031ce29aa7370ec955696ffc1c19d83f4c1a32e22ae17091771e337fc1195ca413c8cfd7011efbaabdd540bbca018eea52d2f6ae1461146ee88a01189a83252fe727757d1dbca7d4c6", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x0, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2c67726f75705f69643d5f7e65d44c1fa72fd8ded896b02456112c09ead8aaec96eb318ab1767df4891395506d5f67db57343946560215dfed06255ea594e5325acf6fcb88593821ea442daba860dfcdda1349e52d75813902015c853185b54e0cdc33217862682b9471aad65da7c7ab58e228dd036e5731f18820a6aaf02247848d7b8f48f8bf3a53d6f97d615c6303d1a8a1ddae1d4386d9a12968eb813a34e78b69735a3598a5380633827a031ce29aa7370ec955696ffc1c19d83f4c1a32e22ae17091771e337fc1195ca413c8cfd7011efbaabdd540bbca018eea52d2f6ae1461146ee88a01189a83252fe727757d1dbca7d4c6", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x0, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000007c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x59, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00Q,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d6900ecb4af6e732c7063723d30303030303030303030303030303030303033382c6686c76e65723eb5fc5d7a4e6d7843c52739ec8e06a782d72f153f3fa063b2c2a03913f2fa9665ef30815980c8c0ae6fff0d", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) fsync(r4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x0, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='nd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303030303030303030936900003230302c75736f65725f6964", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000007c0)) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="67643d23e74f20b061ec7061a9d4ad20ac2b43086691446b6bb2d250fd7b542a7deec850b06ed5a70b72c4db68026dc5a15d40c2413d103ccd2d1b266fc441457ba4dd218201254c7d5ddf563c478ae6acfbc6111b41f48c22278081ccf7939441db615112c1eccde9b4983299a410526810cea65bb574b0b6bf71573232102624d01b3b15346847f8f897c26016", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) lsetxattr$trusted_overlay_nlink(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'U-', 0xd6}, 0x28, 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x0, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000d40)={0x0, 0x51, "440cf99ca66b2f3dba56b6f4a748da17d7d1b6c28c989777b965405be050de7ef19ce4e3c4e04586c3d59d407891ad11b37249446c1aecd18640dccd36505faa085804475f4529ba306c1911062784460e"}, &(0x7f0000000dc0)=0x59) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000e00)=@sack_info={r4, 0x3d1dfd93, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000007c0)=@sack_info={0x0, 0x800000000, 0x1000}, &(0x7f0000000800)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)={r5, 0x6b, "567327f0ba24f50c059f45cfb96179530ab2244bef8f5fb5ce4253524a7383ada2ef37290036083565ebd9726dfdb6bdfabc60470ec34e28d46389ade9df6d0dc82e4137c5117dd2f9f527231ad3d2a73d90e5363b2d0fe5de27d27648273ac78aa035f3cf74583f344f5f"}, &(0x7f00000008c0)=0x73) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r1, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PQTH_CHEg\a,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r7 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001000)={r4, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x4000000000000000}}}, &(0x7f0000000e40)=0xffffff7c) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000c00)={0x1, {{0x2, 0x4e22, @rand_addr=0xffffffff00000000}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d10303030303030303030300000000000000000303030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000140)={0x6, 0xfffffffffffffff8}) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000440)=0x6, 0x2) 04:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000007c0)={0x101, 0x3, 0x17, 0x200, 0x40, 0x4, 0x8}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) ioctl$KDDELIO(r3, 0x4b35, 0x80000001) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d6900ecb4af6e732c7063723d30303030303030303030303030303030303033382c6686c76e65723eb5fc5d7a4e6d7843c52739ec8e06a782d72f153f3fa063b2c2a03913f2fa9665ef30815980c8c0ae6fff0d", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) fsync(r4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x800, &(0x7f0000000fc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1d2c67726f75705f69643debf800000080000000006a25d171166cc06ee440f3cdf4769b23a738e1f567b97e58c06396f6f65f829f42ef8c37f8c09eb602bfdc67fc2c5fdb29fffff5e845b7a0dea85b149899c53d3104000000000600000000000000aaa29f573a3e2523bf12bd899dcd02c23e000000c94b9e2f7cbadaaee66ce7f25bfabfc9f7f9ed0fec47552e008ddd157848ec7b672328fd8acdefcb71cf9df7fef2e9f38f591814bd7977732dceee11529e", @ANYRESOCT=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYRESDEC=r2, @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r4 = accept4(r1, &(0x7f0000000680)=@ax25, &(0x7f0000000200)=0x80, 0x80800) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x4, 0x2000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f0000000700)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@local, @multicast2, 0x4e23, 0x4e20, 0xfd4}, @udp_ip4_spec={@multicast1, @local, 0x4e23, 0x4e24, 0x9}, 0x5, 0x3, 0x9ec, 0x1, 0xffffffffffffffff}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r6, 0x5}, &(0x7f00000009c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) sync_file_range(r7, 0x1, 0x4, 0x4) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000580)={0x7ff, "a89517533ac5a1ad7a8904ab84cb7d7a36cd1f3eb1a0f56495bc80d85abf53da", 0x3, 0x400, 0xfffffffffffffffe, 0x80008, 0xa}) r8 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0xd6f2) 04:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8ec, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000000140)=0x5) 04:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) write$FUSE_OPEN(r7, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/vga_arbiter\x00', 0x12040, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000c80)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r1}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000840)={0x0, 0x9}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000008c0)={0x5, 0x0, 0x204, 0x9, 0x7, 0xd52, 0xfffffffffffffff9, 0x0, r6}, &(0x7f0000000c00)=0x20) r7 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000002c0)={r8, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000007c0)) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r9 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r10, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sysfs$1(0x1, &(0x7f0000000600)='!\x00') ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x6, 0x1, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="665dfe1938a3cc73c24bcfe65cad57c628bab30000b51ea27b1d88b0aff357db13f4685e844143c3e2f701b2769272f13a017fa3337f2710c82b79fb3512dd4e3a22df0e456f3d89ab96b46d146604999c902cf3d552b87d064af9dc1f0fbaa5d8c969b1328abd9c4b6222d46233bdc5ec581be059d97e1cd06c7c03efd54a81620f709112389445fd5b29999da428964d3b284d023d69a2d988263125994849904b56eead", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000005c0)) r3 = dup3(r2, r2, 0x80000) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x3) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r6, 0x8}, &(0x7f00000009c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000700)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8ec, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000007c0)={0x0, 0x2, 0x80000000, 0x8000, 0x5, 0x10000, 0x7, 0x9, 0x12c3, 0x3, 0x2, 0x1078}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r3, &(0x7f0000000000)={0x0, 0x6, 0xffffefffffffffff, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$KDSETLED(r2, 0x4b32, 0x5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='rootmode', 0xffffffffffffffff) fsetxattr(r2, &(0x7f0000000780)=@known='trusted.overlay.nlink\x00', &(0x7f00000007c0)='userem0\x00', 0x8, 0x1) add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000680)="f5feb33c7e094ea98dcb8b0cbf4996e5b8dccc2b588000fb2890a8f863aaddb14a49ca85e7008fd22f058ff661943aa9", 0x30, r5) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={r7, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r8 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r9, 0x800}, &(0x7f00000009c0)=0xc) eventfd(0x10000) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab01}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000007c0)={0x0, 0x2, 0x80000000, 0x8000, 0x5, 0x10000, 0x7, 0x9, 0x12c3, 0x3, 0x2, 0x1078}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64b9717e53084e2cf7a3acfe653d30303030303030303030303030303030303036303030302c757365725f69643da718d06c040c02e206e8a436d3e8c5c6353f4aabd6549a96bb4f601b0f0157c640dacf8b9ae069bd38367629a214d51857fc8bc60ceaf263668c8b7d931ff58a5059e98ad72429e6f6c4cff21bcb1d6c9f56517736359cc7d85e1dd34a83e38a86027583d5438ce9b3d1dc9f0eee4c68025334056d44c436a3a75419ffbd1c1fc207594301f1a520e2d7d0bff1245408dae23ca78a4d75d29f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000007c0)={0x40000000, 0x2, "449fd210d79440a85f479a947fec462ad85483663b6bf896f216eded7d4152f6", 0x6, 0x7ff, 0x9, 0x3, 0x6, 0x6, 0x1ff, 0x7, [0x7, 0x8, 0xa8, 0x5]}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000a00)=""/225) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000680)={0x6, 0x118, 0xfa00, {{0xd7, 0x0, "a37366331ed6a4614500ba2ee8934b73bc9cd88127e99feb3f2adf28b9413cb9e208672319344dcfa81879511eb655ad2191f135657bbc6d3fc42c34fedcb7590975e2abdb23b90561974e914a7f9fb78ff0b82a044459f670163098732b62cabc8c79a8038b15080bd17b40848e8bcaf4bc17ef48c51f4a417e38180ef79e52a75b0f406d17aff5027ce7c56005ed684e13c164ce090ef32640f78cb81f89bcda6e69d5c582b497e5e13ede96d80b2613b919b0ba47ffba0eb4270d09f072e5dc58092bb46ae11ef6f8d28c22b7ebe2f0a0e6e786b4da70cd9ed3fd73d4c94fb86356f4bd160c156c27afe4f2214b39571cfedec1e1b515a0c605a01b479593", 0xe6, 0x5, 0x5, 0x0, 0x3c2, 0x8, 0x3, 0x1}, r6}}, 0x120) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000580)=""/163, &(0x7f0000000140)=0xa3) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000007c0)) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000800)={[{0x9, 0x1, 0x3, 0xffffffffffff6770, 0xb64, 0x6, 0x7fffffff, 0x40, 0x3, 0x1f, 0x200, 0x6, 0x800}, {0x0, 0x7f, 0x1, 0x0, 0x1540000000000, 0x6, 0x0, 0x9, 0x8, 0xfffffffffffff000, 0xab, 0x9, 0x100000000}, {0x8, 0x101, 0x9, 0x8, 0x1, 0x3, 0x9, 0x200, 0x0, 0x9, 0x1f, 0x9, 0x4}], 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl(r3, 0x8000000000009374, &(0x7f00000000c0)="0100000000000000180400000001000000555d040f45426d0270ec78dfd849832f") ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r8 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000007c0)=0x100) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9913, 0x10000}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) setsockopt$inet_udp_int(r5, 0x11, 0x6f, &(0x7f00000007c0)=0x8, 0x4) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:32 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000a00)={0x0, 0x1, [0x7, 0x7, 0x7, 0x2, 0x3, 0x4, 0x7f, 0x800]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x30d800, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c64656661756c745f70654fff697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c7063723d30303030303030303030303030303030303033382c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000580)=0x1ff) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x2, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache='fscache'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'PATH_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r1}}, {@fowner_gt={'fowner>', r1}}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745e7065726d697373696f6e732c646566b6df5027112d8b8ff97ba161756c745f7065626d697373696f6e732c700e0efc55dfc7ec099c39195263723d30303030303030303030303030303030303033382c66756e633d4649", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) flistxattr(r2, &(0x7f00000007c0)=""/54, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) recvmmsg(r3, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)=""/32, 0x20}, {&(0x7f0000000c00)=""/242, 0xf2}], 0x2, &(0x7f0000000d00)=""/4096, 0x1000, 0x80000001}, 0x6}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d00)=""/195, 0xc3}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000002e00)=""/214, 0xd6, 0x5}, 0xfffffffffffffffd}, {{&(0x7f0000002f00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/98, 0x62}], 0x1, &(0x7f0000003040)=""/4096, 0x1000}, 0x81a8}, {{&(0x7f0000004040)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000040c0)=""/189, 0xbd}, {&(0x7f0000004180)=""/211, 0xd3}, {&(0x7f0000004280)=""/218, 0xda}, {&(0x7f0000004380)=""/10, 0xa}, {&(0x7f00000043c0)=""/177, 0xb1}, {&(0x7f0000004480)=""/162, 0xa2}, {&(0x7f0000004540)=""/92, 0x5c}, {&(0x7f00000045c0)=""/238, 0xee}], 0x8, &(0x7f0000004740), 0x0, 0x2}, 0x5}, {{&(0x7f0000004780)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000004800)=""/121, 0x79}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/59, 0x3b}], 0x4, 0x0, 0x0, 0x263}, 0x4}, {{&(0x7f0000006900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000006980)=""/98, 0x62}, {&(0x7f0000006a00)=""/208, 0xd0}, {&(0x7f0000006b00)=""/161, 0xa1}, {&(0x7f0000006bc0)=""/174, 0xae}, {&(0x7f0000006c80)=""/109, 0x6d}, {&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/224, 0xe0}, {&(0x7f0000007e00)=""/171, 0xab}], 0x8, &(0x7f0000007f40)=""/161, 0xa1, 0x8}, 0x5}, {{&(0x7f0000008000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000008080)=""/83, 0x53}, {&(0x7f0000008100)=""/222, 0xde}, {&(0x7f0000008200)=""/109, 0x6d}, {&(0x7f0000008280)=""/169, 0xa9}, {&(0x7f0000008340)=""/64, 0x40}, {&(0x7f0000008380)=""/4096, 0x1000}, {&(0x7f0000009380)=""/58, 0x3a}], 0x7, 0x0, 0x0, 0xac}, 0x1f}], 0x7, 0x100, &(0x7f0000009600)={0x77359400}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000007c0)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0xa090, 0x4) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) bind$nfc_llcp(r4, &(0x7f0000000700)={0x27, 0x0, 0x0, 0x5, 0x5, 0x836, "a5993052a181bcd34eaf0017552306624607d37802929e6ef1ba3bb48f1ccbb114a81d5014179b321ad73a5db732b85259cbbeca720d96399037f419a5005d", 0x20}, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745e7065726d697373696f6e732c646566b6df5027112d8b8ff97ba161756c745f7065626d697373696f6e732c700e0efc55dfc7ec099c39195263723d30303030303030303030303030303030303033382c66756e633d4649", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) flistxattr(r2, &(0x7f00000007c0)=""/54, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x800, 0x54) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745e7065726d697373696f6e732c646566b6df5027112d8b8ff97ba161756c745f7065626d697373696f6e732c700e0efc55dfc7ec099c39195263723d30303030303030303030303030303030303033382c66756e633d4649", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) flistxattr(r2, &(0x7f00000007c0)=""/54, 0x36) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='\x00', r3}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000c00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2100084}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x469}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x88d0) 04:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)=@known='trusted.overlay.redirect\x00', &(0x7f0000000700)='fuse\x00', 0x5, 0x2) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000800)={0x0, 0xffffffffffffff07, 0xfa00, {0x0, &(0x7f0000000840), 0x106, 0xd}}, 0xffffffffffffffae) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$EXT4_IOC_RESIZE_FS(r3, 0x40086610, &(0x7f0000000140)=0x3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="3d743f006d30002c66756e633d504154485f434845434bffffffff0000000078c44d512d62409db47ebfdd3fa89c13008bdb0c506e10bdf039eb95abf88dbd1e8a1799afb986a97bc520b2e02d5f6b65a6369b17f511c593d82a851dcff43fa9c8c9dcca29200324282386205551dcaa99eb8e9ae48a473de58cb1b605a70d999098479a642339158bd086f07aac57e508dba4eeafcc5d50a40825c1b5281a427c9221455b9ad37e6f3b6a05860cad4d59000000000000000000000000cd17794acc5280d99899b3bac2fc3eb8fe5048eccc"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r5, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000680)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x0, 0x9}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000007c0)={'teql0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x13f, 0x9}}, 0xfffffffffffffd79) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000800)={r4, 0x5f, "b1ec8a8af7aaa8ad632488f81533a7187778b30765f6da73e1e71d7c9d7020718b6cda7017605c66667b8e9c29a09a4ec2674b0ee1162df1b7a34e435b81d9f6cbabeb92f57a62d2be7318ae0f4bc0685df4741e836fb5df8fce4e6615194d"}, &(0x7f0000000880)=0x67) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000007c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup(r3, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) 04:35:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x10000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x100, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000440)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f0000000700)={0x5, 0xfffffffffffff801, 0x6, [], &(0x7f0000000580)=0xd}) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) unshare(0x20000000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000680)) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) creat(&(0x7f0000000840)='\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)='trusted.overlay.redirect\x00', &(0x7f0000000640)='./file0\x00', 0x8, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661c52cbc35b55084756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030203030303830302c64656661756c745f7065726d69737330303030303030303030303030303033382c000000000000800000000000", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000440)='fuse\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000700)={0x0, 0x7ff}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e20}}, 0x1, 0x7f, 0x10000, 0x7, 0x8}, &(0x7f0000000840)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000880)={0x0, 0x7, 0x4, 0x0, 0x1000000, 0x0, 0x4, 0x0, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x90c03, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r8 = semget(0x2, 0x7, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) semctl$GETNCNT(r8, 0x3, 0xe, &(0x7f0000000140)=""/13) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',ro0000000000000000060000,uSer_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x7, 0x8, 0xaab3, 0x9, 0x8000}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000007c0)={r4, 0x74, "1ed652a8826ae56944f020e94fd31fa3526ee8df14e34a607ff0434ea5229ae0f02cc28dbbe640afa0e85a05b06802b846354ddee14c3bd62071d1a5f375f8f460b37e35f07daa34682c4f7b5d3a5ec0f44bcb0f3659685745a61ac05228bd8f2379ac36c09d511a92a3a32c699763999fa21295"}, &(0x7f0000000580)=0x7c) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d30783030303030303030307f000000bddd302c64656661756c745f7065726d697373696f6e732c64656661756c745f70d724cb128a2adf6000a0efc424f68fdc65726d697373696f6e732c7063723d30303030303030303030303030303030303033382c66756e", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000940)='trusted.overlay.redirect\x00', &(0x7f0000000980)='./file1\x00', 0x8, 0x2) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a00)={0x0, 0x61, "4af73e845508a2aaf14f026eae77c62225bf82b57339a5f73b2faff68517b79d92c146ad25db8afccd45e5d3554f1d13c773b3faab9229121003aa05dce130e111ad3de384fe0b7ce2fcddb8f6c460d26f7676d00a23d9eb694cfa6184f141b5fa"}, &(0x7f00000008c0)=0x69) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, r5}, &(0x7f00000000c0)=0x20) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000580)={r7, &(0x7f0000000700)=""/200}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000140)={0x6, 0x180000000000000, 0x1, 0xff, 0x11, 0x26}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000840)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1ff, 0x1}}, 0x30) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r8 = socket(0x10, 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ptmx\x00', 0x400400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000800)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7865726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303806000000656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c7063723d30303030303030303030303030303030303033382c66756e633d46494c455f4d4d41502c7569643c2fcbc434889c158cef51838f876f", @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x4800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x0, 0x2, 0x0, 0x9}, 0x14) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000005c0)=0x11, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x400) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000140)=0x6) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000700)=0x9e) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x24000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000440)="1dff4323f164ed31796acd6f147f0f1d", 0x10) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) gettid() ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000940)='trusted.overlay.redirect\x00', &(0x7f0000000980)='./file1\x00', 0x8, 0x2) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a00)={0x0, 0x61, "4af73e845508a2aaf14f026eae77c62225bf82b57339a5f73b2faff68517b79d92c146ad25db8afccd45e5d3554f1d13c773b3faab9229121003aa05dce130e111ad3de384fe0b7ce2fcddb8f6c460d26f7676d00a23d9eb694cfa6184f141b5fa"}, &(0x7f00000008c0)=0x69) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, r5}, &(0x7f00000000c0)=0x20) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000580)={r7, &(0x7f0000000700)=""/200}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000140)={0x6, 0x180000000000000, 0x1, 0xff, 0x11, 0x26}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000840)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1ff, 0x1}}, 0x30) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r8 = socket(0x10, 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ptmx\x00', 0x400400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000800)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r1}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r7, 0x7}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r0, &(0x7f0000001080)=[{&(0x7f00000007c0)="f6e4aa906848c5e6a2a728de652b2115347dad182e9fb0dd36d185f24aac9b3cb2d9673efd9318114adc4017a48132e3d9e53975c56bd001b38d6b196dea221b886d52d881b0d43e3677f89b3b9a4a3c8362b2cfd1bfef4390f08505ab84525d68f2886e642e0d58298aa6ad55805866ba2daa816c324a4edca070e662c0f900c06907524cbd804258cbf9377acc34042c0423ee1da9a7a0ab95cefba9bfb5bc043cff60273538", 0xa7}, {&(0x7f0000000c00)="89433db6ac58dc32d98577c7dc1c61412a4b293e37d728b3d403173bfa9cc4262c372ca4fb1f0fabfe3419895ab9796e2b2afd0aff2de540009a69bc67f0894a5c4c9669a88f5931230ca95e00fc8379ffcf252508b0600f8d7a77bb677fc18871eeb1af7671d5423453417a93cc30355c5d81b1f6e7b7cd83eab5986da5e82b0fc1803a9e9e6f6847721ab1a7791c9c6d48d257d7e35a3ffe50c0c97d882b4d4ea0c8f0a49d14984d66ca8bf5f2cadf677d8b35be4761fea0b48a688e672f59b3eefc8de561ffe26febb2767f8b7730821c94ad122dfc93b85e61f899dda3", 0xdf}, {&(0x7f0000000d00)="dc7f9b5273f14c5d9eed6974b53e08c24c6f674798bf1273d8f013a9183d1db7df402f44b4a04e74a13a89054f96b7ae0f4f40d6383d3279743becd3ac3ee80a80d8971c391be86f86915536300a33566dd0e40a6b8baa453f367ddb7f779df6ee31929b42722f521ef844d6ba7c0426f7b07f288b5730d4d44d0f8cff3b43287d1b337cb68b99412dfb9c5240352884ead0028b86f2b2e7b0a3acb1bc644b44d6b2588f", 0xa4}, {&(0x7f0000000dc0)="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", 0xff}, {&(0x7f0000000880)="0a5d251fe78e484ed6df3dcf017269e8b2af65ddd40a20419e7a52b894af76be1da66fe809fdfe46b4c25bf64cd4282c179a1eb2a7a39c866c246cddb6126a30425ca1cef6503e7f9f9402c047f9cb67c1e02ef04875cc373935390081d83c1e2644a467d5001a7d75aaea2a1187c84747", 0x71}, {&(0x7f0000000ec0)="b9b07cf2329dafbc0d2d93580465f67f542b66781cde0de84bff194dc12f62fc4c8c3f5622939d7aa628c129223a0ae31211d9ba4195b38ebb412097469c2e6309c001ca65cc4c49d29e0b23957b89ec0aeb8e1d8ae96dd0210252b70290ef668e045287e6e8a23827b67391115c86bc6df2cf921d7a40998dde51e4888317aeb6340745ffd12c7619fa1542d25ec86aacc4d9250ef05b9ce1cb", 0x9a}, {&(0x7f0000000f80)="e6dc9dbdde7c7ae17122afff5490622c896ae1e2fa01d1c1c706a9e96983c3ceaaa5ab2c327a1a793078e7908d0224c86adb53da2c8e6d89f8ab5e8f9ec30eddf418051a3b27f1d72f95d9c073458a435557ec7a206cb730c1a6dccde2f6e50a954ed140f6ac2c785d6945dc8237e4a371f0da8691a6308acd1e6fe5c3dc23c99dffe93c21d413c30fa21dff1a535393876817484a27d720bace049b12a78cb0eca1c32c38afa04a2da8ea97390b529193073d180c4e0166898b13129fad7e4f356837c64d4925c97594b75f05351aeba62a8daa564184257e1fdf46d9592223c4ec7c007a213649187d23582c8b", 0xee}], 0x7, 0x0) 04:35:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b4673726f6f743d7465616d30002c66756e633d50415448ff434845434b2c00"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab01}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={0x0, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x0, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="fc726f6f746d6f64653d303030303030303030303030303030303030363030305f69643deace91a502cdba7b7fc1601afcb00000000000000000000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x2, 0x101, 0xfffffffffffffff9, 0x100000001, 0x7, 0x8, 0x3fd1a10e, 0x42, 0x9, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000007c0)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000580)={0x10000, "850f34a6985244ab6931c6659b362ca818f718fe13bfb709880aa3157e9f2692", 0x0, 0x1}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000440)=0x519d, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x400003, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2c67726f7005ae4e7e", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="2c736d61636b6673726f6f743d7465616d30022c66756e633d504154485f434845434b2c00"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000007c0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000ac0)=""/247) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab01000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000700)=0x9e) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x24000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000440)="1dff4323f164ed31796acd6f147f0f1d", 0x10) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 04:35:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) acct(&(0x7f00000007c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10007, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000700)={0x7, {{0xa, 0x4e21, 0xa7, @remote}}, {{0xa, 0x4e24, 0x4, @mcast1, 0x1}}}, 0x108) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) r7 = semget(0x3, 0x4, 0x82) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000840)=""/171) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0xc0045878, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) 04:35:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x400800, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioprio_get$uid(0x3, r0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000680)=0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000001000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2c67726f757081a48a1525f86c22d3382c635f69643d", @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373800000002c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c7063723d30303030303030303030303030303030303033382c66756e633d464946b44c455f4d4d41502c7569643c", @ANYRESDEC=r0, @ANYBLOB="2c64650800000000000000b3756e636f6e66696e65645f752c666f776ee5723e56c56a8baef2d2facdb223b3378832d3bd3b631e26946d70732e82b57a353ca84424c4fd92b35294c5894fbd842a5c1dcac24fe42ff1df36408a75a6f45dfa09cce67eb366ecc241c1ce1de6c794d7af94b368fef1d4363e7a7f9074e73d736fcb5665b3dacc0e43d732edd97eb3c9b96fc2f200d633b9266040e6f91e4f2723834d640955273c6fe6b1f928eb534b74180bb1309d0e28c2a7010c9d3e", @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000600)={&(0x7f00000005c0)}) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x40000092fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d0300]}) 04:35:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c7063723d303030303030068ac36cdb665f5d6f776e65723e00000000000000009f1198df43ae00b449a469d7257aee8bfbe00e330008f2d23fad0d1658e4b4f266f5e38c1a0dc46fcde411cf2c897159e11f4f02185f1c820f8204614181666a", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x105a41, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x5, 0x34000) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0xc0045878, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB="2c64656663154f4e1a68bbb23f8b636f6e666965645f752c666f776e65723e", @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000007c0)={0x1, 0x0, 0x0, {0x1, 0x1, 0x10001, 0x1f}}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 04:35:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x0, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) bind$vsock_dgram(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='fd/4\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000dc0)={0x0, 0x1000}, &(0x7f0000000e40)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000e80)={0x400, 0x8, 0x4, 0x8, 0x0, 0x3, 0xffff, 0x4, r4}, 0x20) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB="2c826e743d756e636f6e723e", @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000fc0)={0x200000000000004, @raw_data="7a301e6a01e11987d5a047c75d26971433cc5ecedc2583ba3837989d6ea10a01090ca2d3df9360998102f443b0d2b7f0e43c85c4a4940259732b2d656962dcb5e7e5f04a1254f70c485c5dbfb16f2f54e2e7454c6d90fcd3410efd0f7adba14c74d5c3aeb63a6ada2155ba2c0ff712e7633f8d76e657476439e4f596b644f5fd5b9f0784c1724e15aaf45d98044d21acd44a08348e674188bbe07513a584d2054e4bc209e8ff2894d18223ceec490d0d86879af3878c6c1b968826eed93b4197cfdb14f53e1608ef"}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) write$P9_RLOCK(r5, &(0x7f0000000d40)={0x8, 0x35, 0x1}, 0x8) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) accept(r5, &(0x7f0000000c80)=@sco, &(0x7f0000000d00)=0x80) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000e00)={'lo\x00', 0x8000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x20000, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000007c0)={r9, @in={{0x2, 0x4e21, @multicast1}}, [0x1, 0x6983, 0xeb0, 0x6, 0xffff, 0x8, 0x9, 0x3, 0x48ca, 0xc4, 0x7, 0xfffffffffffffff7, 0x0, 0x3, 0x891e]}, &(0x7f00000008c0)=0x100) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) 04:35:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 04:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x0, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 04:35:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000580)=0xc) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r6, 0x4}, &(0x7f00000009c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x0, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c7573f1ff5f69643d885da1f5777fa328c9261387eefbdb90a8ba0fb02642fc776af3cf2a6370232d3c6071fac2fa26248ef6f11ebde6c45854f9a4ff706bb11e320441180ec6d3d91f1970b17513a0031d19895a469a17ca4ffe93098fe6f5f68752a0e0c81be1f1cd21fa0b16e9e14951cd27929e163e8e3fd52b059fbd25becc76e5778754a79f0dd8e4057bff465e8f063fb9914eaa8b28d10806", @ANYRESDEC=r0, @ANYBLOB="1131f1d08a5991c3643d", @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f00000005c0)=0xcc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x0, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$P9_RXATTRWALK(r3, &(0x7f00000007c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x40000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000700)={0x2, 0x2}, 0x2) ioprio_get$uid(0x3, r1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000440)={@loopback, r9}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6d030000000000]}) 04:35:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 04:35:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x2, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:45 executing program 5 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x20041, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0x2) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 04:35:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6fdc9121589d66baf930303030301130303030303036303030302c5c7365725f69643d0034a63a258cdfd18b6f6635839c53cc92d500d42cced4b431321fc0bfb485d99ea142e939aeca6c1c5afd9ec3f21d05b870712f5abb86a51d3013b9f6299373f28951751b98faf1bd0219a79015556c8a3aa9a2726142899195569a450522cc07175928572f0581885a3773bae98cab8d2fa08baae5be1d39d89830c5bde6181e5244d423f7ee20221202b25e5a0bc448f0db1c607cd0173d251ce1c9ea7d0ea311096377b638ba84", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB="0ee434f1e83e0619", @ANYRESDEC=r0, @ANYBLOB="8d736d61636b6673726f6f743d7465616d30002c66756e633d504154485f434845434b2c00"]) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000140)=0x5) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 4 (fault-call:8 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000400)={'veth1_to_bond\x00', {0x2, 0x4e22, @multicast1}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000580)={r4, 0x8, 0x719}, 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000007c0), &(0x7f0000000440)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000840)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 550.383384] x86/PAT: syz-executor4:23997 map pfn RAM range req write-combining for [mem 0x180470000-0x180473fff], got write-back [ 550.461267] FAULT_INJECTION: forcing a failure. [ 550.461267] name failslab, interval 1, probability 0, space 0, times 0 [ 550.476697] CPU: 1 PID: 23997 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 550.484081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.493434] Call Trace: [ 550.496034] dump_stack+0x244/0x39d [ 550.499675] ? dump_stack_print_info.cold.1+0x20/0x20 [ 550.504876] ? mark_held_locks+0x130/0x130 [ 550.509124] should_fail.cold.4+0xa/0x17 [ 550.513195] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 550.518297] ? rcu_softirq_qs+0x20/0x20 [ 550.522279] ? dput.part.25+0x241/0x860 [ 550.526264] ? lock_downgrade+0x900/0x900 [ 550.530428] ? mark_held_locks+0x130/0x130 [ 550.534675] ? find_held_lock+0x36/0x1c0 [ 550.538758] ? find_held_lock+0x36/0x1c0 [ 550.542825] ? perf_trace_sched_process_exec+0x860/0x860 [ 550.548287] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 550.553744] __should_failslab+0x124/0x180 [ 550.557986] should_failslab+0x9/0x14 [ 550.561794] kmem_cache_alloc_trace+0x2d7/0x750 [ 550.566461] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 550.571747] ? rcu_softirq_qs+0x20/0x20 [ 550.575740] alloc_pipe_info+0x164/0x5d0 [ 550.579809] ? pipe_read+0x940/0x940 [ 550.583542] ? ksys_dup3+0x680/0x680 [ 550.587271] ? find_held_lock+0x36/0x1c0 [ 550.591337] splice_direct_to_actor+0x6fc/0x8f0 [ 550.596037] ? pipe_to_sendpage+0x400/0x400 [ 550.600365] ? do_splice_to+0x190/0x190 [ 550.604339] ? security_file_permission+0x1c2/0x220 [ 550.609362] ? rw_verify_area+0x118/0x360 [ 550.613522] do_splice_direct+0x2d4/0x420 [ 550.617678] ? splice_direct_to_actor+0x8f0/0x8f0 [ 550.622539] ? rw_verify_area+0x118/0x360 [ 550.626692] do_sendfile+0x62a/0xe20 [ 550.630420] ? do_compat_pwritev64+0x1c0/0x1c0 [ 550.635020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 550.640561] ? _copy_from_user+0xdf/0x150 [ 550.645231] __x64_sys_sendfile64+0x15d/0x250 [ 550.649734] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 550.654328] do_syscall_64+0x1b9/0x820 [ 550.658220] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 550.663591] ? syscall_return_slowpath+0x5e0/0x5e0 [ 550.668529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.673375] ? trace_hardirqs_on_caller+0x310/0x310 [ 550.678395] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 550.683412] ? prepare_exit_to_usermode+0x291/0x3b0 [ 550.688434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.693290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 550.698478] RIP: 0033:0x457569 [ 550.701684] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 550.720605] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 550.728310] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 550.735576] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 550.742858] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 550.750123] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 550.757387] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 04:35:46 executing program 4 (fault-call:8 fault-nth:1): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 04:35:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x5421, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 551.063536] x86/PAT: syz-executor4:24023 map pfn RAM range req write-combining for [mem 0x180570000-0x180573fff], got write-back [ 551.102955] FAULT_INJECTION: forcing a failure. [ 551.102955] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 551.114784] CPU: 0 PID: 24023 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 551.114797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.114804] Call Trace: [ 551.114833] dump_stack+0x244/0x39d [ 551.114860] ? dump_stack_print_info.cold.1+0x20/0x20 [ 551.114883] ? zap_class+0x640/0x640 [ 551.114918] should_fail.cold.4+0xa/0x17 [ 551.114954] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 551.146706] ? find_held_lock+0x36/0x1c0 [ 551.146734] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 551.146753] ? lock_downgrade+0x900/0x900 [ 551.146778] ? check_preemption_disabled+0x48/0x280 [ 551.146800] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 551.155980] ? kasan_check_read+0x11/0x20 [ 551.156012] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 551.156028] ? zap_class+0x640/0x640 [ 551.156041] ? rcu_softirq_qs+0x20/0x20 [ 551.156115] ? rcu_read_unlock+0x16/0x60 [ 551.165692] __alloc_pages_nodemask+0x34b/0xde0 [ 551.165711] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 551.165728] ? kasan_check_read+0x11/0x20 [ 551.165747] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 551.165772] ? __lock_is_held+0xb5/0x140 [ 551.174922] ? rcu_read_unlock+0x33/0x60 [ 551.174964] ? trace_hardirqs_off+0xb8/0x310 [ 551.174985] cache_grow_begin+0xa5/0x8c0 [ 551.175006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 551.184068] ? check_preemption_disabled+0x48/0x280 [ 551.184093] kmem_cache_alloc_trace+0x684/0x750 [ 551.184108] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 551.184124] ? rcu_softirq_qs+0x20/0x20 04:35:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab010000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:46 executing program 4 (fault-call:8 fault-nth:2): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 551.184147] alloc_pipe_info+0x164/0x5d0 [ 551.193121] ? pipe_read+0x940/0x940 [ 551.193146] ? ksys_dup3+0x680/0x680 [ 551.193171] ? find_held_lock+0x36/0x1c0 [ 551.193192] splice_direct_to_actor+0x6fc/0x8f0 [ 551.193213] ? pipe_to_sendpage+0x400/0x400 [ 551.193230] ? do_splice_to+0x190/0x190 [ 551.193243] ? security_file_permission+0x1c2/0x220 [ 551.193261] ? rw_verify_area+0x118/0x360 [ 551.201415] do_splice_direct+0x2d4/0x420 [ 551.201436] ? splice_direct_to_actor+0x8f0/0x8f0 [ 551.201460] ? rw_verify_area+0x118/0x360 [ 551.201479] do_sendfile+0x62a/0xe20 [ 551.201531] ? do_compat_pwritev64+0x1c0/0x1c0 [ 551.211123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 551.211139] ? _copy_from_user+0xdf/0x150 [ 551.211162] __x64_sys_sendfile64+0x15d/0x250 [ 551.211182] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 551.211227] do_syscall_64+0x1b9/0x820 [ 551.211242] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 551.211261] ? syscall_return_slowpath+0x5e0/0x5e0 [ 551.220930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 551.220967] ? trace_hardirqs_on_caller+0x310/0x310 [ 551.220986] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 551.221004] ? prepare_exit_to_usermode+0x291/0x3b0 [ 551.221027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 551.221049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.229155] RIP: 0033:0x457569 [ 551.229172] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 551.229182] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 04:35:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 551.229198] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 551.229208] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 551.229217] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 551.229227] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 551.229237] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 04:35:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) sendmsg$nl_generic(r3, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x158, 0x17, 0xf00, 0x70bd26, 0x25dfdbfe, {0x1f}, [@typed={0x8, 0x2e, @ipv4=@multicast2}, @nested={0x134, 0x7a, [@generic="676a718e9425e937a92b6f8e220398dd3cd5fc6bf215e6660671f2016cb84891787d09628e4c8a24194276c4327daa7e17b308c395a8c311b0f3c04891013b5e4323e89f83bf3637921462974265aa97e39468a562fc3ed4216e1aed47605de869abcda47a683166362f0c18d47e1c25c5e0bc93fde23f5ae48a", @typed={0x8, 0x1c, @fd=r0}, @generic="ebdf9b79d06aedc178643003c0b1a7192ddfcf40d975eb8e5c0718ce1672a3ad07d975575338b524950f4b7d16d6cb410be70d46f5fde43359850611", @typed={0x14, 0x7a, @ipv6=@mcast2}, @generic="240f17309c4b035d349cb5920edaf00d09a0a728b9ebc811c7eb80ce3061197e23b6a62790ed88ed2c5b2a3233c311b58cdf5ec55c5b0341a03a1720", @typed={0xc, 0x65, @u64=0xc67}, @typed={0x14, 0x6c, @ipv6=@local}]}, @typed={0x8, 0x85, @u32=0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioprio_get$uid(0x3, r1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) mount$fuse(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5ab8d4436c322d93cc81793de9d26a306e4519763faf34a1a56bf4e7e7fb8e37b3969df8392c", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000a80)={'nat\x00', 0x0, 0x4, 0x19, [], 0x6, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/25}, &(0x7f0000000b00)=0x78) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r7 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r8, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)=0x0) wait4(r9, 0x0, 0x2000000b, &(0x7f0000000c00)) 04:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0xa099c44015f53330, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000100)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x5452, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 551.634017] x86/PAT: syz-executor4:24048 map pfn RAM range req write-combining for [mem 0x1b5090000-0x1b5093fff], got write-back 04:35:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 551.723833] FAULT_INJECTION: forcing a failure. [ 551.723833] name failslab, interval 1, probability 0, space 0, times 0 04:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000007c0)=0x2, 0x2) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000800)={0x9800000000000000, 0x6, 0x7fffffff, 0xfff}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) [ 551.807392] CPU: 1 PID: 24048 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 551.814838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.824203] Call Trace: [ 551.826811] dump_stack+0x244/0x39d [ 551.830468] ? dump_stack_print_info.cold.1+0x20/0x20 [ 551.835688] ? zap_class+0x640/0x640 [ 551.839426] ? find_held_lock+0x36/0x1c0 [ 551.843525] should_fail.cold.4+0xa/0x17 [ 551.847604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 551.852715] ? __lock_acquire+0x62f/0x4c20 [ 551.852741] ? mark_held_locks+0x130/0x130 [ 551.852766] ? find_held_lock+0x36/0x1c0 [ 551.865312] ? __lock_acquire+0x62f/0x4c20 [ 551.869558] ? perf_trace_sched_process_exec+0x860/0x860 [ 551.875014] ? mark_held_locks+0x130/0x130 [ 551.879265] __should_failslab+0x124/0x180 [ 551.883526] should_failslab+0x9/0x14 [ 551.887335] kmem_cache_alloc_node_trace+0x270/0x740 [ 551.892468] __kmalloc_node+0x3c/0x70 [ 551.896292] kvmalloc_node+0x65/0xf0 [ 551.900027] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 551.904961] ? check_preemption_disabled+0x48/0x280 [ 551.909985] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 551.914924] ? copyin+0x100/0x100 [ 551.918374] ? rcu_softirq_qs+0x20/0x20 [ 551.922345] ? unwind_dump+0x190/0x190 [ 551.926273] ? is_bpf_text_address+0xd3/0x170 [ 551.930772] ? kernel_text_address+0x79/0xf0 [ 551.935183] ? __kernel_text_address+0xd/0x40 [ 551.939697] ? unwind_get_return_address+0x61/0xa0 [ 551.944632] ? __save_stack_trace+0x8d/0xf0 [ 551.948966] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 551.953996] ? iov_iter_pipe+0xbb/0x2f0 [ 551.957979] default_file_splice_read+0x1db/0xb20 [ 551.962822] ? __kmalloc+0x15b/0x760 [ 551.966536] ? alloc_pipe_info+0x2ce/0x5d0 [ 551.970774] ? splice_direct_to_actor+0x6fc/0x8f0 [ 551.975625] ? do_syscall_64+0x1b9/0x820 [ 551.979690] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.985060] ? percpu_ref_put_many+0x11c/0x260 [ 551.989645] ? iter_file_splice_write+0x1050/0x1050 [ 551.994667] ? check_preemption_disabled+0x48/0x280 [ 551.999692] ? kasan_check_read+0x11/0x20 [ 552.003842] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 552.009118] ? rcu_softirq_qs+0x20/0x20 [ 552.013095] ? __lockdep_init_map+0x105/0x590 [ 552.017614] ? __mutex_init+0x1f7/0x290 [ 552.021592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 552.027143] ? fsnotify+0x4e5/0xf20 [ 552.030779] ? __init_waitqueue_head+0x9e/0x150 [ 552.035466] ? fsnotify_first_mark+0x350/0x350 [ 552.040053] ? __fsnotify_parent+0xcc/0x420 [ 552.044382] ? fsnotify+0xf20/0xf20 [ 552.048026] ? alloc_pipe_info+0x495/0x5d0 [ 552.052274] ? pipe_read+0x940/0x940 [ 552.056001] ? security_file_permission+0x1c2/0x220 [ 552.061037] ? iter_file_splice_write+0x1050/0x1050 [ 552.066082] do_splice_to+0x12e/0x190 [ 552.069890] splice_direct_to_actor+0x270/0x8f0 [ 552.074571] ? pipe_to_sendpage+0x400/0x400 [ 552.078898] ? do_splice_to+0x190/0x190 [ 552.082878] ? security_file_permission+0x1c2/0x220 [ 552.087899] ? rw_verify_area+0x118/0x360 [ 552.092055] do_splice_direct+0x2d4/0x420 [ 552.096212] ? splice_direct_to_actor+0x8f0/0x8f0 [ 552.101062] ? rw_verify_area+0x118/0x360 [ 552.105214] do_sendfile+0x62a/0xe20 [ 552.108946] ? do_compat_pwritev64+0x1c0/0x1c0 [ 552.113545] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 552.119085] ? _copy_from_user+0xdf/0x150 [ 552.123241] __x64_sys_sendfile64+0x15d/0x250 [ 552.127745] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 552.132359] do_syscall_64+0x1b9/0x820 [ 552.136245] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 552.141650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 552.146598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 552.151448] ? trace_hardirqs_on_caller+0x310/0x310 [ 552.156464] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 552.161506] ? prepare_exit_to_usermode+0x291/0x3b0 [ 552.166537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 552.171386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 552.176590] RIP: 0033:0x457569 [ 552.179785] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 552.198770] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 552.206479] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 552.214291] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 552.221569] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 552.228849] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 552.236115] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 04:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_config_ext={0x1, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 04:35:47 executing program 4 (fault-call:8 fault-nth:3): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,allow_other,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB="2c646566636f6e746579e9df8112178d0882cef32f1778743d75616124d8736d61636b66737472616e736d7574653d67726f75705f69642c666f776e655f3c0000000000000000", @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00#00000000000001060=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 04:35:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x40049409, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 552.765217] x86/PAT: syz-executor4:24111 map pfn RAM range req write-combining for [mem 0x180f60000-0x180f63fff], got write-back 04:35:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 552.908664] FAULT_INJECTION: forcing a failure. [ 552.908664] name failslab, interval 1, probability 0, space 0, times 0 [ 552.920213] CPU: 1 PID: 24107 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 552.927597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.927605] Call Trace: [ 552.927630] dump_stack+0x244/0x39d [ 552.927656] ? dump_stack_print_info.cold.1+0x20/0x20 [ 552.927676] ? mark_held_locks+0x130/0x130 [ 552.927692] ? find_held_lock+0x36/0x1c0 [ 552.927717] should_fail.cold.4+0xa/0x17 [ 552.927739] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 552.927772] ? __lock_acquire+0x62f/0x4c20 [ 552.927817] ? mark_held_locks+0x130/0x130 [ 552.948614] ? find_held_lock+0x36/0x1c0 [ 552.948661] ? __lock_acquire+0x62f/0x4c20 [ 552.956951] ? perf_trace_sched_process_exec+0x860/0x860 [ 552.966113] __should_failslab+0x124/0x180 [ 552.992531] should_failslab+0x9/0x14 [ 552.996334] kmem_cache_alloc_node_trace+0x270/0x740 [ 553.001543] __kmalloc_node+0x3c/0x70 [ 553.005348] kvmalloc_node+0x65/0xf0 [ 553.009064] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 553.013998] ? check_preemption_disabled+0x48/0x280 [ 553.019021] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 553.023953] ? copyin+0x100/0x100 [ 553.027407] ? rcu_softirq_qs+0x20/0x20 [ 553.031377] ? unwind_dump+0x190/0x190 [ 553.035275] ? is_bpf_text_address+0xd3/0x170 [ 553.039787] ? kernel_text_address+0x79/0xf0 [ 553.044223] ? __kernel_text_address+0xd/0x40 [ 553.048714] ? unwind_get_return_address+0x61/0xa0 [ 553.053647] ? __save_stack_trace+0x8d/0xf0 [ 553.057980] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 553.062999] ? iov_iter_pipe+0xbb/0x2f0 [ 553.066977] default_file_splice_read+0x1db/0xb20 [ 553.071816] ? __kmalloc+0x15b/0x760 [ 553.075531] ? alloc_pipe_info+0x2ce/0x5d0 [ 553.079765] ? splice_direct_to_actor+0x6fc/0x8f0 [ 553.084815] ? do_syscall_64+0x1b9/0x820 [ 553.088877] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 553.094249] ? percpu_ref_put_many+0x11c/0x260 [ 553.098852] ? iter_file_splice_write+0x1050/0x1050 [ 553.103868] ? check_preemption_disabled+0x48/0x280 [ 553.108891] ? kasan_check_read+0x11/0x20 [ 553.113039] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 553.118315] ? rcu_softirq_qs+0x20/0x20 [ 553.122317] ? __lockdep_init_map+0x105/0x590 [ 553.126835] ? __mutex_init+0x1f7/0x290 [ 553.130817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 553.136352] ? fsnotify+0x4e5/0xf20 [ 553.139988] ? __init_waitqueue_head+0x9e/0x150 [ 553.144658] ? fsnotify_first_mark+0x350/0x350 [ 553.149239] ? __fsnotify_parent+0xcc/0x420 [ 553.153562] ? rcu_softirq_qs+0x20/0x20 [ 553.157534] ? fsnotify+0xf20/0xf20 [ 553.161165] ? alloc_pipe_info+0x495/0x5d0 [ 553.165401] ? pipe_read+0x940/0x940 [ 553.169160] ? security_file_permission+0x1c2/0x220 [ 553.174203] ? iter_file_splice_write+0x1050/0x1050 [ 553.179238] do_splice_to+0x12e/0x190 [ 553.183075] splice_direct_to_actor+0x270/0x8f0 [ 553.187748] ? pipe_to_sendpage+0x400/0x400 [ 553.192070] ? do_splice_to+0x190/0x190 [ 553.196042] ? security_file_permission+0x1c2/0x220 [ 553.201059] ? rw_verify_area+0x118/0x360 [ 553.205221] do_splice_direct+0x2d4/0x420 [ 553.209385] ? splice_direct_to_actor+0x8f0/0x8f0 [ 553.214731] ? rw_verify_area+0x118/0x360 [ 553.218884] do_sendfile+0x62a/0xe20 [ 553.222604] ? do_compat_pwritev64+0x1c0/0x1c0 [ 553.227201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 553.232752] ? _copy_from_user+0xdf/0x150 [ 553.236908] __x64_sys_sendfile64+0x15d/0x250 [ 553.241410] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 553.246004] do_syscall_64+0x1b9/0x820 [ 553.249894] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 553.255268] ? syscall_return_slowpath+0x5e0/0x5e0 [ 553.260200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 553.265046] ? trace_hardirqs_on_caller+0x310/0x310 [ 553.270067] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 553.275084] ? prepare_exit_to_usermode+0x291/0x3b0 [ 553.280104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 553.284951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 553.290139] RIP: 0033:0x457569 [ 553.293332] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 553.312231] RSP: 002b:00007fbca9063c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 553.319941] RAX: ffffffffffffffda RBX: 00007fbca9063c90 RCX: 0000000000457569 [ 553.327206] RDX: 0000000020000040 RSI: 0000000000000006 RDI: 0000000000000005 [ 553.334472] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 553.341744] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90646d4 [ 553.349011] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000007 04:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 04:35:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000007c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000c00), r5, 0x2}}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:49 executing program 4 (fault-call:8 fault-nth:4): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>'}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc020660b, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) syz_open_dev$rtc(&(0x7f00000007c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x4, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 553.816521] x86/PAT: syz-executor4:24161 map pfn RAM range req write-combining for [mem 0x17a150000-0x17a153fff], got write-back 04:35:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36dfb]}) [ 553.910092] FAULT_INJECTION: forcing a failure. [ 553.910092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 553.930649] CPU: 0 PID: 24161 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 553.938036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.947397] Call Trace: [ 553.950007] dump_stack+0x244/0x39d [ 553.953667] ? dump_stack_print_info.cold.1+0x20/0x20 [ 553.958902] should_fail.cold.4+0xa/0x17 [ 553.963001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 553.968125] ? is_bpf_text_address+0xac/0x170 [ 553.972641] ? zap_class+0x640/0x640 [ 553.976386] ? lock_downgrade+0x900/0x900 [ 553.980571] ? check_preemption_disabled+0x48/0x280 [ 553.985600] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 553.990545] ? kasan_check_read+0x11/0x20 [ 553.994698] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 553.999975] ? rcu_softirq_qs+0x20/0x20 [ 554.003959] ? find_held_lock+0x36/0x1c0 [ 554.008036] ? check_preemption_disabled+0x48/0x280 [ 554.013057] ? lock_release+0xa00/0xa00 [ 554.017032] ? perf_trace_sched_process_exec+0x860/0x860 [ 554.022487] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 554.028038] ? rcu_pm_notify+0xc0/0xc0 [ 554.031932] ? __might_sleep+0x95/0x190 [ 554.035916] __alloc_pages_nodemask+0x34b/0xde0 [ 554.040593] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 554.045699] ? default_file_splice_read+0x1db/0xb20 [ 554.050716] ? do_splice_to+0x12e/0x190 [ 554.054698] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 554.059726] ? check_preemption_disabled+0x48/0x280 [ 554.064766] ? rcu_pm_notify+0xc0/0xc0 [ 554.068666] ? __kmalloc_node+0x3c/0x70 [ 554.072643] ? __kmalloc_node+0x3c/0x70 [ 554.076619] ? rcu_read_lock_sched_held+0x14f/0x180 [ 554.081822] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 554.087368] alloc_pages_current+0x173/0x350 [ 554.091793] push_pipe+0x3ff/0x7a0 [ 554.095344] ? __kmalloc_node+0x50/0x70 [ 554.099333] iov_iter_get_pages_alloc+0x938/0x15a0 [ 554.104265] ? check_preemption_disabled+0x48/0x280 [ 554.109291] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 554.114272] ? copyin+0x100/0x100 [ 554.117723] ? rcu_softirq_qs+0x20/0x20 [ 554.121700] ? unwind_dump+0x190/0x190 [ 554.125598] ? is_bpf_text_address+0xd3/0x170 [ 554.130099] ? kernel_text_address+0x79/0xf0 [ 554.134518] ? __kernel_text_address+0xd/0x40 [ 554.139016] ? unwind_get_return_address+0x61/0xa0 [ 554.143951] ? __save_stack_trace+0x8d/0xf0 [ 554.148289] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 554.153311] ? iov_iter_pipe+0xbb/0x2f0 [ 554.157309] default_file_splice_read+0x1db/0xb20 [ 554.162152] ? __kmalloc+0x15b/0x760 [ 554.165866] ? alloc_pipe_info+0x2ce/0x5d0 [ 554.170100] ? splice_direct_to_actor+0x6fc/0x8f0 [ 554.174947] ? do_syscall_64+0x1b9/0x820 [ 554.179013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.184385] ? percpu_ref_put_many+0x11c/0x260 [ 554.188971] ? iter_file_splice_write+0x1050/0x1050 [ 554.193991] ? check_preemption_disabled+0x48/0x280 [ 554.199018] ? kasan_check_read+0x11/0x20 [ 554.203169] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 554.208449] ? rcu_softirq_qs+0x20/0x20 [ 554.212430] ? __lockdep_init_map+0x105/0x590 [ 554.216939] ? __mutex_init+0x1f7/0x290 [ 554.220927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.226464] ? fsnotify+0x4e5/0xf20 [ 554.230111] ? __init_waitqueue_head+0x9e/0x150 [ 554.234795] ? fsnotify_first_mark+0x350/0x350 [ 554.239382] ? __fsnotify_parent+0xcc/0x420 [ 554.243704] ? rcu_softirq_qs+0x20/0x20 [ 554.247683] ? fsnotify+0xf20/0xf20 [ 554.251313] ? alloc_pipe_info+0x495/0x5d0 [ 554.255555] ? pipe_read+0x940/0x940 [ 554.259278] ? security_file_permission+0x1c2/0x220 [ 554.264307] ? iter_file_splice_write+0x1050/0x1050 [ 554.269329] do_splice_to+0x12e/0x190 [ 554.273139] splice_direct_to_actor+0x270/0x8f0 [ 554.277838] ? pipe_to_sendpage+0x400/0x400 [ 554.282164] ? do_splice_to+0x190/0x190 [ 554.286139] ? security_file_permission+0x1c2/0x220 [ 554.291161] ? rw_verify_area+0x118/0x360 [ 554.295315] do_splice_direct+0x2d4/0x420 [ 554.299468] ? splice_direct_to_actor+0x8f0/0x8f0 [ 554.304327] ? rw_verify_area+0x118/0x360 [ 554.308506] do_sendfile+0x62a/0xe20 [ 554.312248] ? do_compat_pwritev64+0x1c0/0x1c0 [ 554.316846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 554.322389] ? _copy_from_user+0xdf/0x150 [ 554.326545] __x64_sys_sendfile64+0x15d/0x250 [ 554.331050] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 554.335646] do_syscall_64+0x1b9/0x820 [ 554.339536] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 554.344905] ? syscall_return_slowpath+0x5e0/0x5e0 [ 554.349838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.354689] ? trace_hardirqs_on_caller+0x310/0x310 [ 554.359707] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 554.364729] ? prepare_exit_to_usermode+0x291/0x3b0 [ 554.369762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.374614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.379803] RIP: 0033:0x457569 [ 554.383000] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.401899] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 04:35:49 executing program 4 (fault-call:8 fault-nth:5): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 554.409609] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 554.416878] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 554.424143] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 554.431424] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 554.438694] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 04:35:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xfffb, 0x19d768e8}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000001300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,default_permissions,pcr=00000000000000000038,func=FILE_MMAP,uid<', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fowner>', @ANYRESDEC=r0, @ANYBLOB="2c666f776e65723ce18b3012fde4746a4b7ebf5daa708526a3e3669aa30a55980e96628cfb9055193df3391d49715ab010f61a90efd4e6e5f0fdb5e8132166f7229fda0b8aa9592e73ce3a1e17b9c0207b9f74", @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000ac0)={0x2d, @win={{0x7ff, 0x0, 0x4, 0x100000001}, 0x9, 0x3ff, &(0x7f0000000940)={{0x7f, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff7}, &(0x7f0000000780)={{0x8, 0x2, 0xa85a, 0x80000000}, &(0x7f0000000740)={{0x3, 0xffffffffffffff7f, 0x7ff, 0x5c2}}}}, 0xfff, &(0x7f0000000a00)="46b38476572da3006eb13a2afead1d8066212fcf861e53b24f96dba91dc77a61ab80822918ffc6e617b6484666b8cd46ca2e4de28610c9febdb2942ff7d2b053ae547317613081cd9b088c4a3d257b438b03636e94fca075dd8e27f94511c991b565068e0ca24515ee6947db0ca25bd12fb0adc2e6936cb8d284f1baf07906fee51ef68cc47b1986f8d2f1efdb4cdc71008992ac1b4c555a30c169d4e19184a12ed707827b887ef12494d8766d1a549370ef8c5a", 0x6}}) sendmsg$xdp(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000007c0)="7b5337e1d5f3dde990ee9e54ab25ac30385941ad625def89d695a87b926457c2ba8b0cc479618b5bfdc98b71898714d5391458cd6c5804b787277c99df17bf429d36420830dd17bbce89f44ee3dcfe7187b292f9", 0xffffff7a}, {&(0x7f0000000c00)="6ec83fad9af6a450e2f81dd3472a8e351e4667622fb61730bc291024140c52c4e78b4a3c478d1923b0449f71bfe9ceaeb0b50ccfeac208c8ac66bd981cdc42ad041321c99a38d3beedb8fdf75e36a7d58e0fbfca7886852821f3177f3419dcdf75ec69a2cb5f81f8639fbf430596c89cfe24c3f57aab25fa6cc7900cc4b757c16fbe885da32ac54eb07fc6f6082a4a92a9c2ce57e711ac3fb9ba208dfa2fe2cd18ff541fa26b947ee0c136b8ee6cf40b083af9d546e22d1bc45ca006a052ceadcddc843279e167c9831ac89deb", 0xcd}, {&(0x7f0000000d00)="614aa29d34df975b5741c376e21474c7dc4b558668e920fcd08ce3d6542534288af73f856cdaab357083078c92bd5046f2d234393e6a6b5a47030fd2f3718fe193ebe061eec47bfe69f4fa9b0eadf7950d8cfa0924eb3757a0148611cafb91d4a94c1664802db09ee842d7bcadd28684ae4abe55951de492e735d048a1f3c2b74bd1e6fb8cf84dabe1b4e93ea44a0320145ea05fa31a03d90d406866ac3934f0443aaca2154f02ecb3cfe3a9cb55b87769147d3753b72fbaaffe00c98aa5a589edb27f70fdd452a67f261f958d00c57e9a818a229a7f0c37516946dd06e30f64e0308c5da2705fc395aa74bb4c99f50bcf7539d01cc728", 0xf7}, {&(0x7f0000000840)="f9953b2d92b2b1c9dbfdfeee62abf9c61fef6bba4f79cc16a33d80d539da6960b0abdcea3793e7c428017a3741b66ad544d958209374986480e5330fe500b1c4bae862859b39d7e17189e463179c93a044bc34506018b828945cf3521b3eb9f501bf156f385293d7176b93ac000d90b56d537e2300495cd1c8af4398edf33b1e85e0ec8ae94153373e0c39721c561a9ac7cabaa0c1317f8b7f80f1314830a3fe873068338021667b", 0xa8}, {&(0x7f00000012c0)="ba4abf031d647c73fefd1c7b8f77f3302f72b3315240", 0x16}, {&(0x7f0000000e40)="04682d76e467fa5c80db206d971da5cc52aa9d0e7b19a8d0923f5e7d1e7ecb34d5538d5a4b03a91fa72d2a68e87bf6e2c3855149d258bd2369c26255ed79521436f430926bb37c42c2945c24b4be4d92ef02713a277f28c33d132ac0bc2719b54df93c9b6d8b4e2d15f3948aedaadabfb84f933ce3ca6d0eb52278a18d32454d2c9cae9239c7c8602aaa5d51ca5b3b303368155c13ea6a4b2d", 0x99}, {&(0x7f0000000f00)="3e2f43b547c2635ac5c83c8bae72807c6be3d48a36159de85e8054b3a9d199748bc178b24b8a409b57358aefcd5d7643aa189e3cd1db1488707c77a4cd635a296cba3b4982551c60ec6d456d2fb2249e9996de5fc88eae6085e5bb4d", 0x5c}, {&(0x7f0000000f80)="892f2f7704d3a76892f3f821e0cd5af6090fed74191eb2b3ebcc7985dfee6810f1b6381168849e7b83090812f57b74f448bbc3c8ce55e9b22ebaef1dacf9b46e92cf95b42bd307c0fdece8a7c0101c9146feb8cf0a8ba008adcabf6babfc72925ded3f63f31cdcb4f1aa24537b69bd3949554a27df34e87ac7be080a5b64665cdb68f48ee923987f1f99863bccd14bcdec5dd9cc3b59fb11e862568ef0f6be5257e70589cee3e532f15911d9cdf62761d64ba9ea932f14d80698469e766518d3302748ce0b1d1ed9c5ead8b7966a13a6dd4de4", 0xd3}, {&(0x7f0000001080)="e4eec1808b446fef7f22312c0c9d3976a9bc851154e08f4061049ee5a00b9c623a7db0bde0c0", 0x26}, {&(0x7f00000010c0)="a7265daf0517b25c66c5cb1891bb5ba29f40dcad52774d2f79314137900ed409797ce9fb785e5b71eaf1f705eca1360803d8bb70d9d3990429fa04fa3a5b251f727c7824f649f0bb6572fdd0a9686bfcd2d20f4394b2484f9737f11c171974416fd1e89152d373b816ec14c41bec871cdf297b930bb69db9ea300a53f5e6bbc83b57c7207ffd32c243c5cb6728b1898fcf45565fd6516e75e2527757a9a48f34a0bb66afee022f898d7c9cde98508452e30715359878d0551f5a7082d517e020e71efe655f388c6caf4692e773b369faa3c0da0107865ab15abd9057e66db9e2b5341092310da8d4", 0x14a}], 0xa, 0x0, 0x0, 0x80}, 0xc000) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r6 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r7, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff, 0x4e6}, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030302919f8a34d7208993036303030302c0bb68920314cf1c64901f250abe56698818de381299ffe6d4e7aa9ec8d40f013fdf939a62dfad8fca9728b66ff", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,blksize=0x0000000000000800,default_permissions,pcr=00000000000000000038,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c666f7c4282e5be", @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=team0\x00,func=PATH_CHECK,\x00']) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1ff, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r5 = socket(0x10, 0x802, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000580)="630d0bdbb37c72091e0e51265e3053b0f3d7ef02d7fc49b1053238a7dc636bbf49ff212dd70ae1615029ab7a1c5c39a040508ba6a06cb1429a1fa9549a68fb6c91d975c5c6c3eeb262e4c1b472f6fdd90a17e3eb8df0ea3b252bd69e9a1631901ce56b91186a9d32a26b88298c9bc5697f8df8a32b38a057e4f31083624708574e8ae0b3a49d7cee71f4697155a2a9ac236849236a13eb314a8085") getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x800}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) [ 554.604655] x86/PAT: syz-executor4:24186 map pfn RAM range req write-combining for [mem 0x177670000-0x177673fff], got write-back [ 554.660337] FAULT_INJECTION: forcing a failure. [ 554.660337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.746617] CPU: 1 PID: 24186 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 554.754035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.763391] Call Trace: [ 554.765988] dump_stack+0x244/0x39d [ 554.769634] ? dump_stack_print_info.cold.1+0x20/0x20 [ 554.774847] should_fail.cold.4+0xa/0x17 [ 554.778921] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 554.784029] ? is_bpf_text_address+0xac/0x170 [ 554.788534] ? zap_class+0x640/0x640 [ 554.792253] ? lock_downgrade+0x900/0x900 [ 554.796422] ? check_preemption_disabled+0x48/0x280 [ 554.801441] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 554.806373] ? kasan_check_read+0x11/0x20 [ 554.810533] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 554.815812] ? rcu_softirq_qs+0x20/0x20 [ 554.819826] ? find_held_lock+0x36/0x1c0 [ 554.823902] ? check_preemption_disabled+0x48/0x280 [ 554.828924] ? lock_release+0xa00/0xa00 [ 554.832901] ? perf_trace_sched_process_exec+0x860/0x860 [ 554.838356] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 554.843897] ? rcu_pm_notify+0xc0/0xc0 [ 554.847795] ? __might_sleep+0x95/0x190 [ 554.851777] __alloc_pages_nodemask+0x34b/0xde0 [ 554.856453] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 554.861556] ? default_file_splice_read+0x1db/0xb20 [ 554.866592] ? do_splice_to+0x12e/0x190 [ 554.870574] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 554.875604] ? check_preemption_disabled+0x48/0x280 [ 554.880651] ? rcu_pm_notify+0xc0/0xc0 [ 554.884547] ? __kmalloc_node+0x3c/0x70 [ 554.888529] ? __kmalloc_node+0x3c/0x70 [ 554.892515] ? rcu_read_lock_sched_held+0x14f/0x180 [ 554.897541] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 554.903090] alloc_pages_current+0x173/0x350 [ 554.907516] push_pipe+0x3ff/0x7a0 [ 554.911059] ? __kmalloc_node+0x50/0x70 [ 554.915044] iov_iter_get_pages_alloc+0x938/0x15a0 [ 554.919980] ? check_preemption_disabled+0x48/0x280 [ 554.924999] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 554.929939] ? copyin+0x100/0x100 [ 554.933394] ? rcu_softirq_qs+0x20/0x20 [ 554.937366] ? unwind_dump+0x190/0x190 [ 554.941272] ? is_bpf_text_address+0xd3/0x170 [ 554.945775] ? kernel_text_address+0x79/0xf0 [ 554.950190] ? __kernel_text_address+0xd/0x40 [ 554.954687] ? unwind_get_return_address+0x61/0xa0 [ 554.959622] ? __save_stack_trace+0x8d/0xf0 [ 554.963955] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 554.968977] ? iov_iter_pipe+0xbb/0x2f0 [ 554.972957] default_file_splice_read+0x1db/0xb20 [ 554.977801] ? __kmalloc+0x15b/0x760 [ 554.981537] ? alloc_pipe_info+0x2ce/0x5d0 [ 554.985773] ? splice_direct_to_actor+0x6fc/0x8f0 [ 554.990639] ? do_syscall_64+0x1b9/0x820 [ 554.994700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.000075] ? percpu_ref_put_many+0x11c/0x260 [ 555.004665] ? iter_file_splice_write+0x1050/0x1050 [ 555.009685] ? check_preemption_disabled+0x48/0x280 [ 555.014713] ? kasan_check_read+0x11/0x20 [ 555.018862] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 555.024143] ? rcu_softirq_qs+0x20/0x20 [ 555.028126] ? __lockdep_init_map+0x105/0x590 [ 555.032631] ? __mutex_init+0x1f7/0x290 [ 555.036613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.042151] ? fsnotify+0x4e5/0xf20 [ 555.045788] ? __init_waitqueue_head+0x9e/0x150 [ 555.050462] ? fsnotify_first_mark+0x350/0x350 [ 555.055048] ? __fsnotify_parent+0xcc/0x420 [ 555.059368] ? rcu_softirq_qs+0x20/0x20 [ 555.063357] ? fsnotify+0xf20/0xf20 [ 555.066992] ? alloc_pipe_info+0x495/0x5d0 [ 555.071234] ? pipe_read+0x940/0x940 [ 555.074963] ? security_file_permission+0x1c2/0x220 [ 555.079985] ? iter_file_splice_write+0x1050/0x1050 [ 555.085145] do_splice_to+0x12e/0x190 [ 555.088958] splice_direct_to_actor+0x270/0x8f0 [ 555.093637] ? pipe_to_sendpage+0x400/0x400 [ 555.097967] ? do_splice_to+0x190/0x190 [ 555.101946] ? security_file_permission+0x1c2/0x220 [ 555.106967] ? rw_verify_area+0x118/0x360 [ 555.111124] do_splice_direct+0x2d4/0x420 [ 555.115282] ? splice_direct_to_actor+0x8f0/0x8f0 [ 555.120134] ? rw_verify_area+0x118/0x360 [ 555.124289] do_sendfile+0x62a/0xe20 [ 555.128019] ? do_compat_pwritev64+0x1c0/0x1c0 [ 555.132621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 555.138161] ? _copy_from_user+0xdf/0x150 [ 555.142315] __x64_sys_sendfile64+0x15d/0x250 [ 555.146816] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 555.151417] do_syscall_64+0x1b9/0x820 [ 555.155309] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 555.160676] ? syscall_return_slowpath+0x5e0/0x5e0 [ 555.165608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.170459] ? trace_hardirqs_on_caller+0x310/0x310 [ 555.175477] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 555.180512] ? prepare_exit_to_usermode+0x291/0x3b0 [ 555.185538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.190394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.195583] RIP: 0033:0x457569 [ 555.198781] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.218192] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 555.225904] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 555.233172] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 555.240444] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 04:35:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 555.247713] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 555.254984] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 04:35:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 04:35:50 executing program 4 (fault-call:8 fault-nth:6): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) 04:35:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) 04:35:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4020940d, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x800, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x26}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_lt={'uid<', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'team0\x00'}}]}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xfd, 0x1ff, 0x4, 0x1, 0x0, 0x1, 0x3737, 0x2}, &(0x7f00000000c0)=0x20) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x84) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x9}}, 0x20) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000000bc0)='/dev/vcsa#\x00', 0x92fb, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 04:35:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 555.532446] x86/PAT: syz-executor4:24221 map pfn RAM range req write-combining for [mem 0x1bcee0000-0x1bcee3fff], got write-back [ 555.563896] FAULT_INJECTION: forcing a failure. [ 555.563896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.589928] CPU: 1 PID: 24221 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #112 [ 555.597326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.597336] Call Trace: [ 555.597364] dump_stack+0x244/0x39d [ 555.597393] ? dump_stack_print_info.cold.1+0x20/0x20 [ 555.597426] should_fail.cold.4+0xa/0x17 [ 555.597450] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 555.597469] ? is_bpf_text_address+0xac/0x170 [ 555.597487] ? zap_class+0x640/0x640 [ 555.597516] ? lock_downgrade+0x900/0x900 04:35:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 555.597547] ? check_preemption_disabled+0x48/0x280 [ 555.622336] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 555.622354] ? kasan_check_read+0x11/0x20 [ 555.622373] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 555.635655] ? rcu_softirq_qs+0x20/0x20 [ 555.635678] ? find_held_lock+0x36/0x1c0 [ 555.635709] ? check_preemption_disabled+0x48/0x280 [ 555.650271] ? lock_release+0xa00/0xa00 [ 555.650290] ? perf_trace_sched_process_exec+0x860/0x860 [ 555.650308] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 555.650332] ? rcu_pm_notify+0xc0/0xc0 [ 555.659741] ? __might_sleep+0x95/0x190 [ 555.667766] __alloc_pages_nodemask+0x34b/0xde0 [ 555.667786] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 555.667800] ? default_file_splice_read+0x1db/0xb20 [ 555.667813] ? do_splice_to+0x12e/0x190 [ 555.667832] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 555.682252] ? check_preemption_disabled+0x48/0x280 [ 555.682288] ? rcu_pm_notify+0xc0/0xc0 [ 555.691700] ? __kmalloc_node+0x3c/0x70 [ 555.691716] ? __kmalloc_node+0x3c/0x70 [ 555.691737] ? rcu_read_lock_sched_held+0x14f/0x180 [ 555.700364] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 555.700388] alloc_pages_current+0x173/0x350 [ 555.700412] push_pipe+0x3ff/0x7a0 [ 555.700427] ? __kmalloc_node+0x50/0x70 [ 555.700451] iov_iter_get_pages_alloc+0x938/0x15a0 [ 555.710550] ? check_preemption_disabled+0x48/0x280 [ 555.710571] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 555.710591] ? copyin+0x100/0x100 [ 555.719553] ? rcu_softirq_qs+0x20/0x20 [ 555.719568] ? unwind_dump+0x190/0x190 [ 555.719594] ? is_bpf_text_address+0xd3/0x170 04:35:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 555.719615] ? kernel_text_address+0x79/0xf0 [ 555.728506] ? __kernel_text_address+0xd/0x40 [ 555.728524] ? unwind_get_return_address+0x61/0xa0 [ 555.728543] ? __save_stack_trace+0x8d/0xf0 [ 555.728575] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 555.736523] ? iov_iter_pipe+0xbb/0x2f0 [ 555.736545] default_file_splice_read+0x1db/0xb20 [ 555.736565] ? __kmalloc+0x15b/0x760 [ 555.747094] ? alloc_pipe_info+0x2ce/0x5d0 [ 555.747109] ? splice_direct_to_actor+0x6fc/0x8f0 [ 555.747129] ? do_syscall_64+0x1b9/0x820 [ 555.747144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.747171] ? percpu_ref_put_many+0x11c/0x260 [ 555.807783] ? iter_file_splice_write+0x1050/0x1050 [ 555.807802] ? check_preemption_disabled+0x48/0x280 [ 555.807826] ? kasan_check_read+0x11/0x20 [ 555.807845] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 555.816830] ? rcu_softirq_qs+0x20/0x20 [ 555.871778] ? __lockdep_init_map+0x105/0x590 [ 555.876304] ? __mutex_init+0x1f7/0x290 [ 555.880303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.885849] ? fsnotify+0x4e5/0xf20 04:35:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) [ 555.889490] ? __init_waitqueue_head+0x9e/0x150 [ 555.889520] ? fsnotify_first_mark+0x350/0x350 [ 555.889534] ? __fsnotify_parent+0xcc/0x420 [ 555.889552] ? rcu_softirq_qs+0x20/0x20 [ 555.907093] ? fsnotify+0xf20/0xf20 [ 555.910736] ? alloc_pipe_info+0x495/0x5d0 [ 555.914986] ? pipe_read+0x940/0x940 [ 555.918721] ? security_file_permission+0x1c2/0x220 [ 555.923787] ? iter_file_splice_write+0x1050/0x1050 [ 555.928811] do_splice_to+0x12e/0x190 [ 555.928833] splice_direct_to_actor+0x270/0x8f0 [ 555.928854] ? pipe_to_sendpage+0x400/0x400 [ 555.928875] ? do_splice_to+0x190/0x190 [ 555.928889] ? security_file_permission+0x1c2/0x220 [ 555.928909] ? rw_verify_area+0x118/0x360 [ 555.954793] do_splice_direct+0x2d4/0x420 [ 555.958963] ? splice_direct_to_actor+0x8f0/0x8f0 [ 555.963832] ? rw_verify_area+0x118/0x360 [ 555.968000] do_sendfile+0x62a/0xe20 [ 555.971740] ? do_compat_pwritev64+0x1c0/0x1c0 [ 555.976350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 555.981903] ? _copy_from_user+0xdf/0x150 [ 555.986075] __x64_sys_sendfile64+0x15d/0x250 [ 555.990587] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 555.995200] do_syscall_64+0x1b9/0x820 [ 555.999102] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 556.004486] ? syscall_return_slowpath+0x5e0/0x5e0 [ 556.009440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.014307] ? trace_hardirqs_on_caller+0x310/0x310 [ 556.019357] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 556.024390] ? prepare_exit_to_usermode+0x291/0x3b0 [ 556.029426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.034294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 556.039493] RIP: 0033:0x457569 [ 556.042708] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.061616] RSP: 002b:00007fbca90a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 556.069328] RAX: ffffffffffffffda RBX: 00007fbca90a5c90 RCX: 0000000000457569 [ 556.076599] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000004 [ 556.083871] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 556.091138] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fbca90a66d4 [ 556.098408] R13: 00000000004c37cc R14: 00000000004d5958 R15: 0000000000000008 [ 825.597233] INFO: task kworker/0:1:12 blocked for more than 140 seconds. [ 825.604325] Not tainted 4.20.0-rc2+ #112 [ 825.608998] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.616985] kworker/0:1 D21016 12 2 0x80000000 [ 825.622839] Workqueue: ipv6_addrconf addrconf_verify_work [ 825.628458] Call Trace: [ 825.631110] __schedule+0x8cf/0x21d0 [ 825.634853] ? mark_held_locks+0x130/0x130 [ 825.639156] ? __sched_text_start+0x8/0x8 [ 825.643323] ? find_held_lock+0x36/0x1c0 [ 825.647440] ? zap_class+0x640/0x640 [ 825.651165] ? zap_class+0x640/0x640 [ 825.655015] ? zap_class+0x640/0x640 [ 825.658894] ? print_usage_bug+0xc0/0xc0 [ 825.662976] ? find_held_lock+0x36/0x1c0 [ 825.667036] schedule+0xfe/0x460 [ 825.670462] ? __mutex_lock+0xafa/0x16f0 [ 825.674536] ? __schedule+0x21d0/0x21d0 [ 825.678673] ? kasan_check_read+0x11/0x20 [ 825.682871] ? do_raw_spin_unlock+0xa7/0x330 [ 825.687336] ? do_raw_spin_trylock+0x270/0x270 [ 825.691938] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 825.696427] ? mutex_destroy+0x200/0x200 [ 825.700565] schedule_preempt_disabled+0x13/0x20 [ 825.705337] __mutex_lock+0xaff/0x16f0 [ 825.709332] ? add_timer+0x62e/0x15a0 [ 825.713194] ? rtnl_lock+0x17/0x20 [ 825.716737] ? mutex_trylock+0x2b0/0x2b0 [ 825.720855] ? zap_class+0x640/0x640 [ 825.724620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 825.730283] ? __perf_event_task_sched_out+0x33a/0x1bf0 [ 825.735685] ? zap_class+0x640/0x640 [ 825.739515] ? debug_object_deactivate+0x2eb/0x450 [ 825.744467] ? lock_downgrade+0x900/0x900 [ 825.748700] ? find_held_lock+0x36/0x1c0 [ 825.752779] ? zap_class+0x640/0x640 [ 825.756491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 825.762093] ? check_preemption_disabled+0x48/0x280 [ 825.767153] ? __lock_is_held+0xb5/0x140 [ 825.771217] mutex_lock_nested+0x16/0x20 [ 825.775267] ? mutex_lock_nested+0x16/0x20 [ 825.779556] rtnl_lock+0x17/0x20 [ 825.782938] addrconf_verify_work+0xe/0x20 [ 825.787298] process_one_work+0xc90/0x1c40 [ 825.791558] ? mark_held_locks+0x130/0x130 [ 825.795794] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 825.800511] ? __switch_to_asm+0x40/0x70 [ 825.804582] ? __switch_to_asm+0x34/0x70 [ 825.808725] ? __switch_to_asm+0x40/0x70 [ 825.812799] ? __switch_to_asm+0x34/0x70 [ 825.816848] ? __switch_to_asm+0x40/0x70 [ 825.820958] ? __switch_to_asm+0x34/0x70 [ 825.825032] ? __switch_to_asm+0x40/0x70 [ 825.829146] ? __schedule+0x8d7/0x21d0 [ 825.833046] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 825.837746] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 825.842663] ? zap_class+0x640/0x640 [ 825.846386] ? lock_acquire+0x1ed/0x520 [ 825.850423] ? worker_thread+0x3e0/0x1390 [ 825.854589] ? kasan_check_read+0x11/0x20 [ 825.858800] ? do_raw_spin_lock+0x14f/0x350 [ 825.863566] ? kasan_check_read+0x11/0x20 [ 825.867766] ? rwlock_bug.part.2+0x90/0x90 [ 825.872032] ? trace_hardirqs_on+0x310/0x310 [ 825.876441] worker_thread+0x17f/0x1390 [ 825.880464] ? __switch_to_asm+0x34/0x70 [ 825.884542] ? process_one_work+0x1c40/0x1c40 [ 825.889104] ? __sched_text_start+0x8/0x8 [ 825.893275] ? __kthread_parkme+0xce/0x1a0 [ 825.897564] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 825.902684] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 825.907841] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 825.912437] ? trace_hardirqs_on+0xbd/0x310 [ 825.916751] ? kasan_check_read+0x11/0x20 [ 825.920952] ? __kthread_parkme+0xce/0x1a0 [ 825.925201] ? trace_hardirqs_off_caller+0x310/0x310 [ 825.930369] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 825.935486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 825.941079] ? __kthread_parkme+0xfb/0x1a0 [ 825.945328] ? process_one_work+0x1c40/0x1c40 [ 825.950020] kthread+0x35a/0x440 [ 825.953402] ? kthread_stop+0x900/0x900 [ 825.957433] ret_from_fork+0x3a/0x50 [ 825.961262] [ 825.961262] Showing all locks held in the system: [ 825.967672] 3 locks held by kworker/0:1/12: [ 825.972005] #0: 00000000a6ef2672 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0xb43/0x1c40 [ 825.982465] #1: 00000000f034131b ((addr_chk_work).work){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 825.991539] #2: 00000000f849a1ae (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 825.998873] 1 lock held by khungtaskd/1007: [ 826.003198] #0: 00000000373c4e5f (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 826.011987] 2 locks held by kworker/1:2/2426: [ 826.016488] #0: 000000008c29f11d ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 826.025817] #1: 00000000df312e3d ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 826.036661] 1 lock held by rsyslogd/5927: [ 826.040952] 2 locks held by getty/6017: [ 826.044940] #0: 0000000069820a4c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.053229] #1: 00000000b7929ee0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.062209] 2 locks held by getty/6018: [ 826.066173] #0: 0000000073a74ba9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.074473] #1: 0000000079e9489a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.083406] 2 locks held by getty/6019: [ 826.087434] #0: 000000006a99611e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.095696] #1: 00000000f57d1551 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.104594] 2 locks held by getty/6020: [ 826.108617] #0: 00000000f18854ed (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.116869] #1: 00000000ba86261f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.125774] 2 locks held by getty/6021: [ 826.129775] #0: 00000000b2032ec1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.138055] #1: 000000008871fcad (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.146996] 2 locks held by getty/6022: [ 826.151155] #0: 00000000b2210b8e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.159572] #1: 00000000a510acbb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.168651] 2 locks held by getty/6023: [ 826.172726] #0: 000000002788ce55 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 826.181032] #1: 0000000056f83f80 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 826.190025] 2 locks held by syz-executor1/24208: [ 826.194855] 3 locks held by kworker/1:3/24280: [ 826.199492] #0: 000000008c29f11d ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 826.208825] #1: 00000000971870b0 ((linkwatch_work).work){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 826.217978] #2: 00000000f849a1ae (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 826.225438] [ 826.227062] ============================================= [ 826.227062] [ 826.234284] NMI backtrace for cpu 0 [ 826.237975] CPU: 0 PID: 1007 Comm: khungtaskd Not tainted 4.20.0-rc2+ #112 [ 826.245064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.254405] Call Trace: [ 826.257044] dump_stack+0x244/0x39d [ 826.260676] ? dump_stack_print_info.cold.1+0x20/0x20 [ 826.265854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 826.271381] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 826.276063] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 826.281241] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 826.286509] arch_trigger_cpumask_backtrace+0x14/0x20 [ 826.291687] watchdog+0xb51/0x1060 [ 826.295214] ? hungtask_pm_notify+0xb0/0xb0 [ 826.299606] ? __kthread_parkme+0xce/0x1a0 [ 826.303829] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 826.308910] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 826.314001] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 826.318579] ? trace_hardirqs_on+0xbd/0x310 [ 826.322881] ? kasan_check_read+0x11/0x20 [ 826.327010] ? __kthread_parkme+0xce/0x1a0 [ 826.331224] ? trace_hardirqs_off_caller+0x310/0x310 [ 826.336308] ? trace_hardirqs_off_caller+0x310/0x310 [ 826.341501] ? lockdep_init_map+0x9/0x10 [ 826.345563] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 826.350655] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 826.356176] ? __kthread_parkme+0xfb/0x1a0 [ 826.360396] ? hungtask_pm_notify+0xb0/0xb0 [ 826.364697] kthread+0x35a/0x440 [ 826.368044] ? kthread_stop+0x900/0x900 [ 826.372008] ret_from_fork+0x3a/0x50 [ 826.375858] Sending NMI from CPU 0 to CPUs 1: [ 826.380487] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 826.381417] Kernel panic - not syncing: hung_task: blocked tasks [ 826.394242] CPU: 0 PID: 1007 Comm: khungtaskd Not tainted 4.20.0-rc2+ #112 [ 826.401243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.410575] Call Trace: [ 826.413159] dump_stack+0x244/0x39d [ 826.416768] ? dump_stack_print_info.cold.1+0x20/0x20 [ 826.421939] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 826.427025] panic+0x2ad/0x55c [ 826.430202] ? add_taint.cold.5+0x16/0x16 [ 826.434331] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 826.439765] ? nmi_trigger_cpumask_backtrace+0x1f9/0x22a [ 826.445194] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 826.450633] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 826.456084] watchdog+0xb62/0x1060 [ 826.459611] ? hungtask_pm_notify+0xb0/0xb0 [ 826.464034] ? __kthread_parkme+0xce/0x1a0 [ 826.468367] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 826.473457] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 826.478551] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 826.483116] ? trace_hardirqs_on+0xbd/0x310 [ 826.487548] ? kasan_check_read+0x11/0x20 [ 826.491680] ? __kthread_parkme+0xce/0x1a0 [ 826.495901] ? trace_hardirqs_off_caller+0x310/0x310 [ 826.501099] ? trace_hardirqs_off_caller+0x310/0x310 [ 826.506361] ? lockdep_init_map+0x9/0x10 [ 826.510412] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 826.515495] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 826.521017] ? __kthread_parkme+0xfb/0x1a0 [ 826.525234] ? hungtask_pm_notify+0xb0/0xb0 [ 826.529536] kthread+0x35a/0x440 [ 826.532882] ? kthread_stop+0x900/0x900 [ 826.536836] ret_from_fork+0x3a/0x50 [ 826.541678] Kernel Offset: disabled [ 826.545309] Rebooting in 86400 seconds..