onnect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2, 0x7, 0x3, 0x0, 0x0, {0x1d67725fb51eb0d7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}}, 0x4881)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='stat\x00')

17:48:06 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:06 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:06 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:06 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:06 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000300)=0x1e)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010300000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="ab2f8af00796c47c23efa8b130f295383b9167e7e51f2cb904a87e26d643db1f6dc8c9eb94e8d5da79b9e96bcdd59d530b07a4efc4122c5804763b78c7b5d3b559193bc1b5a58b3ed138af448a08b22db9bd24d2ee66121748a7f41282df425a810e495c0af124a21534823b4a6d86b3df638f16bcb5ead09c561256d929d1c6e7b37d85110d000000000000f3804f70198318adfd978b08611112560645a4b6f1903290d9612cd69f1f726d85040000000000000095c6e54ec01739353fd53c279ab6e4cd55314c02000000ce6f8220e9e93e8d1dc87a2900"/232], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x41)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000e0001000000000000000000060071bbf600"/33], 0x1c}}, 0x0)

17:48:06 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48)

17:48:06 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:06 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48)

17:48:06 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1a000, 0x0)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x1000, &(0x7f0000000100)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r2, &(0x7f0000000500), 0x37d, 0x0)

17:48:06 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3c43, 0x102, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x1000, 0x1, 0x0, 0x40000000004, 0x3ff, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:07 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:07 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48)

17:48:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1a0c0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x9}, &(0x7f0000000100)=0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r5, &(0x7f0000000500), 0x37d, 0x0)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b7000000000000ff2f0000000000000007000000000000009d00000000000000d5864a16f01be48f479e1495439dcb824d7b7b715cf11789d09c3ac8a7a7655354e159636105bf1456d9ae3679631f7dcafd26d00678f1fee123ef2c93e865169db28e46b53fb4d62b4400c318e7d19bd25968af76742ab7f52aaf2ac44488cf2fa005d31d8bf62552f59708d6c964676bdbf89c8f2c0766bdc93de8998a60584251cc0b4807ef9278aed2afd16e2c1164e2142bb0dd7865380ed55819c90fe324274725243f3f4bf0aa776b477fcce9b4f2829e09b0d6d6b7dd45782befb235fa00443e0ac283114854c79ba4f421cd057582837d1f511ace7d93ee6df414a505574a56c0fd2fe2c4a9897edd5b3ccd6727cb91"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:07 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2004c051)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x1, 0x5, 0xa, 0x0, '*ppp0nodev'}}, 0x33)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000003)
r4 = accept4(r3, 0x0, 0x0, 0x0)
connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0xa30000, 0x8001, 0x16c, <r5=>r4, 0x0, &(0x7f0000000040)={0x9b090c, 0x3, [], @value=0x8}})
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000001c0))
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:07 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b7000000000000ff2f0000000000000007000000000000009d00000000000000d5864a16f01be48f479e1495439dcb824d7b7b715cf11789d09c3ac8a7a7655354e159636105bf1456d9ae3679631f7dcafd26d00678f1fee123ef2c93e865169db28e46b53fb4d62b4400c318e7d19bd25968af76742ab7f52aaf2ac44488cf2fa005d31d8bf62552f59708d6c964676bdbf89c8f2c0766bdc93de8998a60584251cc0b4807ef9278aed2afd16e2c1164e2142bb0dd7865380ed55819c90fe324274725243f3f4bf0aa776b477fcce9b4f2829e09b0d6d6b7dd45782befb235fa00443e0ac283114854c79ba4f421cd057582837d1f511ace7d93ee6df414a505574a56c0fd2fe2c4a9897edd5b3ccd6727cb91"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:07 executing program 5:
socket$inet6(0xa, 0x80003, 0x7)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

17:48:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x80840, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x30}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000007080)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000007000)={0x70, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd92}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000841)
timer_getoverrun(r1)
recvmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x3}, {{&(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/54, 0x36}], 0x7, &(0x7f0000000580)=""/87, 0x57}, 0x3}, {{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000001940)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f0000001900)=""/28, 0x1c}], 0x6, &(0x7f0000001c80)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f00000019c0)=@tipc, 0x80, &(0x7f0000006e40)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/168, 0xa8}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/124, 0x7c}, {&(0x7f0000006c80)=""/210, 0xd2}, {&(0x7f0000006d80)=""/170, 0xaa}], 0xa, &(0x7f0000001c00)=""/15, 0xf}, 0x6}], 0x4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0xff, 0xfffffffb}]}, 0xc, 0x3)
preadv(r5, &(0x7f0000000500), 0x37d, 0x0)

17:48:07 executing program 5:
socket$inet6(0xa, 0x80003, 0x7)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

17:48:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b7000000000000ff2f0000000000000007000000000000009d00000000000000d5864a16f01be48f479e1495439dcb824d7b7b715cf11789d09c3ac8a7a7655354e159636105bf1456d9ae3679631f7dcafd26d00678f1fee123ef2c93e865169db28e46b53fb4d62b4400c318e7d19bd25968af76742ab7f52aaf2ac44488cf2fa005d31d8bf62552f59708d6c964676bdbf89c8f2c0766bdc93de8998a60584251cc0b4807ef9278aed2afd16e2c1164e2142bb0dd7865380ed55819c90fe324274725243f3f4bf0aa776b477fcce9b4f2829e09b0d6d6b7dd45782befb235fa00443e0ac283114854c79ba4f421cd057582837d1f511ace7d93ee6df414a505574a56c0fd2fe2c4a9897edd5b3ccd6727cb91"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 5:
socket$inet6(0xa, 0x80003, 0x7)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

17:48:07 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:07 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
openat$cgroup(r1, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7, &(0x7f0000000900)=[{&(0x7f0000000240)="2f118aa67f2213f8142b93cfee8808909c9015df269f2a5b5672002ec547cf88db41ee2bc8e9456df97c765a1d64191176775467a5c9ee7ea686d5bf13c8afd6fe6ff1f32fa3a4bfe6d1eaf73c750eea579bda9110eb4c476f7f4539cd53cf3e321c5587afe793dbf22e681031b659752b899b06a49187c15d29b63aecbf249942", 0x81, 0x3}, {&(0x7f0000000300)="6310c58a0a344d88d38aef87eaa0b7ab3c7fd0764137b1d0b9ef93f91fca12aece3fcff86b909e882c261cb70886c137b58c16ae25fd305c2b787e956538603b11855733f3ac3a2d34a0dc9dc4294409e25df7fc217fedc8406f49d2f7feced0e9c2a8b7fe113b2b8f0f8ca33c33527ef87a4501be397aaf0cd27813211f5ff4e914230c602faad84cc2d76746c12d901919b6545df3fe4ef0242f76b29589e73af4cbf4c46a8221023848a9bba3c8e42eff500821c17c021b8c46a70d947922ff2a9464d93ccd361cf13376925ffc71bd5010e1574d478f7a0a6a72930d5cf3e29bc64ef47b9a94bd", 0xe9, 0x5}, {&(0x7f00000004c0)="fe3d564b55ec91465e06cdd4476640b17f0f0e3a649f12ddc0505c4226e62a52742b7661cccd2390ddb4bb8da69e806cf3158f96ae99aad6138847d22754ce5fe9b05e79c97536c92dfdcc544a", 0x4d, 0x7}, {&(0x7f0000000540)="71fce50e2186ef9fa097e57961acf0dc389d74b698c668649d5293e50acb293bc8444f023c77cdd0bd7636589f1130f3c251622464fa1cdf505cfa8d73a4a136be613dbb3561caa6ed3e8dd603afc319092355769f2b9bebdf36ed44084679fbb7583ca8f7b66435b29cdc8415a8649239e211df6377864599896659ea07040f0b5dbcd9702942a9fecfdbd955d6930224d7befc48a798b298a557109c511ffe6a60dee41f90e99012be69b366e2ca8b95c30476d6ac381a6374a5dbca759874af6efd07bdb26e739e36e5e63754ce22031375114db2438ce5caa510235e22b2d7dbb77a2cb846cc78f2e5efeb", 0xed, 0x6}, {&(0x7f0000000640)="f2690ff7b9ba2fc18e51c08f2f22ea6152c80371e6d1f52e7c284ba5ac969527eab7aed7c3708048892737fb1085264741884d530454fecf65da416a737a1409f2d071ed9ad02504976f0a9c8461da8e4a81b224651294af198a52c633efbd6933b3f62fde4e799f5c5be2b7c5445189177bc95f15233fcfa100429b7ba5217c1841885b34816dc546bd6063a3750da0eeef1bc379eb075fd33008c349860dc8abe93d64c95dc4c4ed79e3f332cfaf0abf1f0fdf73c535712a53a57df268aece094f069c259ba5a3a831d78ef617e506af1f56f4be2c58d4da1a7db9", 0xdc, 0x3ff}, {&(0x7f0000000400)="1758e410ccb8a7", 0x7, 0x2}, {&(0x7f0000000740)="d6ebe23c6360343f79001f6b3285962adadad5e6c88bb28642d9841296ea45e33e2f9b072efee59d", 0x28, 0x1ff}], 0x4004, &(0x7f00000009c0)='\'selfposix_acl_access)vboxnet0,$wlan1.em1posix_acl_accesssystemwlan1}!&\\\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
fdatasync(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x585, 0x96, 0x0, 0xfffa, 0x12, "7c6a62e35976fb9b"})
sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x5, 0xc, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0)

17:48:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78)

17:48:07 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

[  745.356494] NOHZ: local_softirq_pending 08
[  745.360777] NOHZ: local_softirq_pending 08
17:48:10 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)

17:48:10 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:10 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x0, 0x0)

17:48:10 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x20000003)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000))
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)

17:48:10 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003380)=[{&(0x7f0000000200)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000240)="af4425375255da18aa1cf35da971f3233fb342764febe5e3297befb3732b21d0a02feecc73563d14faa864c1fa2d4bf0aba39352ef9c5b22f13ebce0", 0x3c}], 0x2, 0x0, 0x0, 0x1}, {&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0x8000, @ipv4={[], [], @remote}, 0x1f}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000300)="d498336f2196018a7635fac1492b153144d42049c89b875468dd10524597f11e72bf97b54f1f8787fb677becf8df76784574f769b2c8a0bfa80233579216078053919a9363874f84a0d06b895eff654db09577289dccc8c27e9490f6f83c1b3762a9fa73b020ebaeab9d3d43fb87dd6b82a1f96405fff0acf7171d81f37f17dec7feff942ce66d7d50361d6cabb7b0a40ea0433f64344ad65cea182f1870c10f477f60839098b578cbdda539d9068b453851e4f7ab2142f7bdfff533c75c7eb3658a9c1abf479516b2d527bb56e837e45afa3979cb7512dedc7e8f03e6dc0444207a5eb2ef9de92abf2a38db410b2c063a9bfec26c8a5d", 0xf7}, {&(0x7f0000000400)="46fa35ae78c5c65918228aceb8e8fdc195730d7da2b9c539f3a065c48c6ebce8c4674f0fca6d4d967e2e38abd7db4bcd289700b065fccdbaca9068495780d69f3d5b45b388fe7ad9940d7950617f5a92dff2ec4fdccf59c6a593b5dd64ed2bc1ab29dc64fd36dcc4304d418108676285fe4c38325ae23290bba81810780302def86c26f0986f3706d4cb43aac3e31c2a254ec8a279ffb0a7719bb97a7f23678378b875594edfcd88cc9aef5e8a233ac67d1f211aaebda5286e0872a85b4bb574d3b7c8a83bbdc42811c1be89f04dcf90", 0xd0}, {&(0x7f0000000500)="8fb8f4efd292f69b13c81636a0c49f6009d9333ff31657367a257584e41af81f3b5ddc64c019ce431aab804e71f668545b47dc4b5fd3511847a308e12d2eef6c28d2b77908d0680e6fb2e163ec74099e2f4d43e9b40567f7a3d8861720a9bf959a007610e1e86dcb94cdc81a07adb9bcea34df0623c859c93d7b930dfc9614702f941c9ff461c79cda0ea4709e038d288447b1688c35c62ab767da232582f454f295420bfd0df8e9c8d5714473d743e42a51cda1ca450ac89f98746a7dcaf14c9c69dde3", 0xc4}, {&(0x7f0000000600)="93e3696ce64f81b865d022cd914a3ad42209ff20f3d30dd7b7daa7fe7544b16a67b82108b8cbbd755c3d5211669f9b1e295d5706e9f3b7ce3ea614be5ebe8c17c0ae36e765ed1254a8db6e7ff3ef66bedd0890194d540c6f5611ade8d482337a8b805182609c143269e04ba55bc543aa66f893775ef3aacf6fe0a0802d2f577f725b3e6007d7", 0x86}, {&(0x7f00000006c0)="eadc374115238fafa38565b68ba8caf1d614a83d222dd0dc0981b504a7248f9b9ade20f06f93d70bb4be8df252e2efc4e8f06f7b04e634e32602b56354f7cbc2e8f55a76b817eb9654c30c65", 0x4c}, {&(0x7f0000000740)="0acb3d0cea5c2d9b8ab62623c2e88dd204", 0x11}, {&(0x7f0000000780)="d9892b46a4c0a4213e6d0bd8f449271f876b5aae531f206e13a8d90fa5d49be3b7783ce9d6f463c3ffc6416e0842a07b9336def0b187f62ae29ffce93bb51083c3a592f2eb6f1f848db618f5a8b62084a12147b42fa16059e4e260debfd7154bc53289d0c1839252118b3cdbf722db1e26658b1f385d2bf89cc60c81c9a5f07b71a11d23d915a48c49ddbc364d179df0cecaceb653c14448eb32ab7378aa9d65a83ef1160862a80ef16900258504dfcc0ad40cbea378b9bc057b2b09d4cb09539b547a634b027e059a1fa043cbf97743e00a3dd7f2b7340dfee9bb374a0cc43bcf4f55", 0xe3}, {&(0x7f0000001900)="2ee4e2924463f4959f6f634720255b483627f8d90fb040580e27c0efc3243e633c3d446ca7236c049670c4c2f6f6da7288be28ec26c7c228292d434fc523ebcfb32d6baabc493f3af13ad71840d9c4e598d36202536af24ff30808c8fd08a71961194f659451dbd0f81b80d09e7bbac1e164f765fafc20f983c24ee72c0f54c715cbd7afd3ac7b", 0x87}], 0x8, &(0x7f0000001a40)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, [], 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0x4, 0xffe, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}], 0xa8, 0x24008011}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001b00)="c09c0d3171921aaa0febc380", 0xc}, {&(0x7f0000001b40)="fa99390a045e037f46c83c7a75f41f445c036bb58a64cee1160967bb319309f407f33baf92af300740a7fe818866012c2df57e331388b20e50eb", 0x3a}, {&(0x7f0000001c80)="f770ca8f1367a4d66eb8e6311044d94aa7c17c551a9cab3f72daff823f128afe5f00dc4c796467a6d3e91d7b4513ce153822745ec2b731f7a5d6bf7696705b5a1f4f60b2f86fe08ac35477cc086c5144c315bc8ec044a7ca67b90b39bb60c82c0c3939e0ab9fe3d3718d9cc40827171421f71d4dbf1c22e1ef31c5b1da032ae7befea6eeb1b0c3d7a3a1b021bdf1b0d67027e34de84e6dd2afc8b4816de6e837f2f33aec865d882d590478c0b9085019cb02064f85b3fefcc0276680d96ad8876a19fe9e5d3fddfeb61c", 0xca}, {&(0x7f0000001d80)="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", 0xfa}], 0x4, &(0x7f0000001ec0)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x7, 0x0, 0x0, 0x0, 0x7fffffff, 0x7, 0x4}}, @init={0x18, 0x84, 0x0, {0x1, 0x4, 0x1, 0x8}}, @init={0x18, 0x84, 0x0, {0x0, 0x3a, 0x401, 0x5}}], 0x60, 0x4}, {&(0x7f0000001f40)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001f80)="0ee597ef2d1ed4c274e67a742615b975138e8e51f27fcf208d430af4f08f687478a7e1e85aa8afc2deb0afcaa740516864aed16a1d6e5503c9797fec0d1bb6e08704b612c3049d5222e976a7a30e8b144b3c269595943df01e76007973db5cc49bf06d7ecf7b6d64dff1ec07f8321dd57327f709bf644d65cb168567e724e88e636145cd71fe478f6a6858f616abb2325ea6b3b96c292906cc1336b3b9e76cf842291a91e1ec638de2a0900c202941535f0c319821754b1bc778a78abb1b6f8b710ea54a23ff462b0ecc250a59f927e66254a063f4d3021e102dc55982a6f3", 0xdf}, {&(0x7f0000002080)="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", 0x1000}], 0x2, &(0x7f00000030c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3f}}], 0x18}, {&(0x7f0000003100)=@in6={0xa, 0x4e24, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c, &(0x7f0000003340)=[{&(0x7f0000003140)="3373a330dad9c56681247e258e3cbeb7b4b0220dd2611ed020f661688e58916d63735df0e339194d102e82b4560dbee19f62a3408488a80a2192f33f4d91ee1dafa9a519f875c40bf2c3daf64ce0fd0a87abf7ccf3af2708a5bdf6770c6649cdebcb19df50ec3310c2a5ed7d19699c6562cfe5d85feeb536b2f0660fb968289d65613c5f", 0x84}, {&(0x7f0000003200)="7b0c6d17ee452974291c7bd34b06f80840d18bd2135fc5b0c4e0480c78860d421dfd0d234b9a0aff080d19832818295a988375b652f2f81140bdd677949b5d655283cf680d3507d5d3328a7660b9b27c0f9fbac94af2c8522a0dedd9fe2cad2cdca9511abd9e40f4187e020a50a3a90dc40a3a92e247a353125e72447bd1566e3b7638883a1f5452f741e0c481ba17e6e69d80d1b3aee1fb66fa95da4fed84383d978a03a68a16ed0e77a3d41b92a2a7fde06a3134f088503a2dcb4f41b327becde66ae43ad6aaa531cb62fe4bdb9d9413fcbe19e4ad8e359350281362e30b90b69f184ca145f364d202e386d97c08591d1d96fad65db0", 0xf7}, {&(0x7f0000003300)="027193d5fd657b048dd7420e804980bf445805784411e326e5503ebf86767eb5f9f0f60ee9121104e43c5cf5edafd87307e9ac518096", 0x36}], 0x3, 0x0, 0x0, 0x200c0000}], 0x5, 0x0)
preadv(r1, &(0x7f0000000500), 0x37d, 0x0)
gettid()
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r4 = accept4(r3, 0x0, 0x0, 0x0)
connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x20000003)
r6 = accept4(r5, 0x0, 0x0, 0x0)
connect(r6, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010)

17:48:10 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:10 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)

17:48:10 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000032}, 0xa}], 0x17, 0x0)

17:48:10 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:10 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:10 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:11 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0x0, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan0\x00')
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @sco={0x1f, @none}, @l2={0x1f, 0xfff8, @any, 0x1, 0x1}, @nl=@kern={0x10, 0x0, 0x0, 0x80}, 0x3, 0x0, 0x0, 0x0, 0x102, &(0x7f0000000240)='ip6gre0\x00', 0x100000001, 0x401, 0x5})
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000001000000019fd08c9cc00f1d6f64075004aceb8720d25ee3bfa271ba2d669e49186ba78f9ef1f4d11a733a71ea46a730322b4199beedba08b4b3c8de060f1c020dd5a4d87600df83782fea835479375141ee8899fc2b11e532ed35d0d393b62f7d0b691300"/132], 0x1c}}, 0x0)

17:48:11 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:11 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:11 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:11 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

[  748.676413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
17:48:11 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:11 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100))
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000032}, 0xa}], 0x17, 0x0)

17:48:11 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:11 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:11 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:11 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x20000003)
r3 = accept4(r2, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x40c, 0x12, 0x20, 0x70bd29, 0x25dfdbfe, {0x17, 0x40, 0x2, 0x6, {0x4e20, 0x4e22, [0x4, 0x8, 0x0, 0x5], [0x5, 0xf30, 0x8, 0x79], 0x0, [0x8]}, 0x0, 0xfee}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "a0"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "369b77bec5524df143e2e1e376d9bb144976390496ba5ccb1dcdcc3d23530a1336a31c3d9b4328a1d75ee3f799b7ae509a2abdb2daac8a1260d98344b3470bab615ddd424c8780699cc299143e2dd7608a05df879c25979ccec0b056f326202463f7b0374028a4d7e50b87a847a7d3a4a966ef487225f2ad90e137ee20f501c7c56a66c0af8a8115db9f0087cfab7f91dab45ff8b75dd1048a2a8bda2f2f6d01eed4d1aa73eea124997342e40499f6e4efcda80caa64a3d685b7ecae43c3f749c939dbec8b04def00d26740323e1ee50a901d54b9b99987fb5854e5b5c673dc8c6d8f0ae9186698e7ce300af56f71371becc927106416c94"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "ad0678abf7"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "97e9fb71210cc41eb3771fd470910f6efa02cb3053aab8b91162dcbf273a8d2f5d0959974a32ef9996f35b075f9c568a73a1f8faf985898034ea294eb6d611f25c15c176fce5ce956c75baa762130d17dcce76dd443271c1d75a251f58260e9eb2f5cc98fc2b52f97c4432f9d4d201551469f151474ccd0b79b42f877041b6d01713fb7b36c8be82b28419433f9652983d5d1a84cca368fa4338a317"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "3c455c7cd1da11f4f365c3850e40bb54ff02a8084b531ec9ff4f3778912d6a7d7afab6720a11f606839a0ffa0def853fe0d178374b611b684e293b5bd83532b5aa2ca2c5f2dfbd61679b5ab7"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "c7f56675d71141d99e61b384a2848f59650fffa170b4bf6e0e3694b889462cbf696bd5fdfaa00323b2609e35e3fe26ac1fa454b98e5dfe7557a7f0137db866c0d412f8c7894585e170ee18398a22f8ef0e6b445512a6f06aba4aeb74d21eb2c624025d7a8db1d3f892fc0d289945fd6bb9e6f8a1b8508f7427cd0a0d862d4c2c74fd79fb335cc1e8d884321be705aceefba89a2c82dfe0d40b68f0924228ea6e2e8332944fe91b3393e7e0c935"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "045a"}]}, 0x40c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002200010000000000e3000000000400000008006c"], 0x1c}}, 0x0)

17:48:12 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:12 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:12 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200080, 0x0)

17:48:12 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:12 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x24, 0x2, {{}, [@TCA_NETEM_ECN={0x8}]}}}]}, 0x54}}, 0x0)

17:48:12 executing program 0:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 0:
r0 = socket(0x0, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:12 executing program 0:
r0 = socket(0x0, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:12 executing program 4:
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/771], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b92503b700030700009e40f089061fffffe103000021638477fbac14143fe0004301c699da153f08a0e6e380f60115f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28)

17:48:12 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:13 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:13 executing program 0:
r0 = socket(0x0, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000fdffffff8e375d460000ddff00000000000000c1bfca952262f834ffa4e385bf4387b6f5675db90f17bcb2e4d00beb1c83e57964bd9c4560207e9d995a49204892cd10632159c54a02bd69cde5b1e5d9004ccafb11593876185f967441c1fb814eb7c44a9123ffe233eb6a1c115079bbe7835dcd90d3d2e82111f2ac85448aa16b082a64755115719f"], 0x1c}}, 0x0)

17:48:13 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:13 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 4:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2100002}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000500", @ANYRES16=0x0, @ANYBLOB], 0x40}}, 0x810)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x8000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000000))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000540)="1cdf66d8e6c694f94e81a3bcec09d129cd95f866fa70ad3c6310ec03997a68d38115d8247e9a422cbb9f56958ecfffcaadfb20f6f315bc0b7e4e44c534", 0x3d}, {0x0}, {0x0}], 0x3)
close(r2)

17:48:13 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x3, 0x705840)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0x44, [], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/68}, &(0x7f0000000040)=0x78)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1f4, 0x14, 0x1, 0x70bd2a, 0xfffffffc, {0xf}, [@nested={0x1e0, 0x53, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @fd=r3}, @generic="7dc482bb90c31eb72ac01ed0693f68df86e684b2a8d94e9fecf070d84edf23ae06f03c54a3f732fe84a49f2a8b1f860d7470ca8a8df93ea8e61cb1f6d038a429d74e07501195f5692b2e67030b685e9fc8791f7c9f9aa9572b2055736fd50f9d6899c8b5cf0e11b8db3b750816e8e196912e6c5ac9c2e9b277a650dd02237a54c997029517cd5280d36c2beef4566809fe4751545a5887f89c0c98169122c6ff6588e850ed07801f929fbf57eaf5ead178bbeaaaf9d8bfec72e0037d9c65e27da89b29aac607bf7e4469f1be35a7d997a1f124e9c4de770354c758c025ac9ba3252737ddf15d7939a45ce2d2d37e8506c37bdc0a230f2d38a1", @typed={0x36, 0x62, 0x0, 0x0, @binary="59543ff117e98c143beed6c2822127577e6c08503b70471217470bbdfb631c9b0d6f79a3e4eafefc79a343ecc98d0ab84565"}, @generic="8fa4c81aeffcfc2d9cab0bc36952d6218dc5e65df3fc78e72d3ff289d7023ba6a30b6470152616ebb9bb1e088b9bfd371651d5a42268e8f6628ca9efaa4beded9512461f20be89914dd5d78b7ceb95fae306e13a40473d16", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x4}, @generic="aa70a302f2f63c86c92643b676c396181b72cc54b464fec884068546ddedbe5202d96f79d8ea13aca0d312f2ad4e58524fd8acec98dfabcc65229f54c6478b"]}]}, 0x1f4}}, 0x4)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0)

17:48:13 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @mcast1}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0xffffffffffffffff, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

[  750.989313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9748 comm=syz-executor.0
17:48:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:13 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:13 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

[  751.277698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9758 comm=syz-executor.0
17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(0x0, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x20, 0x0)
mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

17:48:14 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(0x0, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 2:
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(0x0, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getitimer(0x2, &(0x7f0000000200))
socket$inet6(0xa, 0x6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000), 0x10)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c041cd7df07000c00005bc46e1a144b36965500"/33], 0x1c}}, 0x0)

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 4:

[  752.006552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9804 comm=syz-executor.0
17:48:14 executing program 4:

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)

17:48:14 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x7, 0x0, 0x5, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x800000000000040, 0x6, 0x0, 0x1]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008000c00819cf1"], 0x1c}}, 0x0)

17:48:14 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, 0x0, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:14 executing program 4:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x7ff}], 0x0, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
io_setup(0x5, &(0x7f0000000180)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x96010002, 0xf9010000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

17:48:14 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x8, 0x8, 0x1, 0xcd}, {0x101, 0x8, 0x5, 0x8000}, {0x8001, 0x40, 0x81, 0x4}, {0x1000, 0x5, 0x1, 0x1}, {0x9, 0x9, 0x6, 0x1}, {0x80, 0x81, 0xa0, 0x3}, {0xfffe, 0x32, 0x3, 0x2}]})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r2, &(0x7f0000000500), 0x37d, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0xffffffffffffffff)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000003140)=[{{&(0x7f0000000200)=@l2={0x1f, 0x4, @any, 0x7fff}, 0x80, &(0x7f0000000300)=[{}, {&(0x7f0000000180)="3edec5538bfa047c05830415a2dc89e149ea910ae5b1ca87523976994a6dcb5ccc69ca56902a7469f427d0ba650d069bf8b3570abd", 0x35}, {&(0x7f0000000280)="096a4ce3d2d996d5e3616a243202d3532b0a922d92a6477efa18d03371ba39b6b4cafe0b0637d40f168456473a5473a4127e7c4c9090c605363fc285d0bf258d93517375b1338157a76c0f8dcd696b63c475722422b1d429be0a70afe6f9b9bff6f2e2e66796e4356de90a87c8", 0x6d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="77711d1018e05d05c73c442cb73db33059aa992d077ed623fbf72fa029a103720f49070b42cb67b0b1", 0x29}, {&(0x7f0000000380)="24e0bca636f331a72f8329881251720534b6f2570a9a0ec3da90", 0x1a}, {&(0x7f00000003c0)="18f29726e909474029a4227691b10e1b6cd84b43e855343b29312ad3a5bf4b40cacc035dd3964b41d1f8f12484b82d11d573896926af2e56a4bb4ed22191e96b18fbb278e55fedfb44bc5efb8cbaf73f78607d96757fea09ff80c47310bbe408d970327a22d8e22da15ba117dbda3dd712e87752c0d65d8ed8f7f7df1ef1d03b2eab4220f41b06498b7766cda6df8b19", 0x90}], 0x3, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9b0}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{&(0x7f0000000500)=@nfc_llcp={0x27, 0x1, 0x0, 0x1, 0x40, 0x7, "5de93c1dd39b975240e501c5707c4172a0b0db5496da96e0ad2095774ce490be26e53737e05f917d2ef6572d25138304805c17fe234dc593a36e34096cceb1", 0x1f}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000580)="4a75fb560e65471c9277aa4f5f2bdc182216522c1cdb4bd7a52d86bfac74ec477451780fcc78b3615eb148b28fe50eae9d5e2414a84cfda01ada7ac0af6831340b49509d2069424c88483f810500cc95d1a5b096e50b681035bea2386447de0c5676b57f", 0x64}, {&(0x7f0000000600)="b683a48ba8e5c0efa29a3bb1c85a21cb5a34c360a97581fbb0989f69f0ae81135027701925b09db1655661a32ae754da8c72e5183445c33c0a2f20b355f67dbb597c19128842f7325f1007902a5bbfde43f98ea5761dcb0df8ab34042fa97acde4d8d2d614c5b5c1eafe0f93e616610ed5ee8202f03bedffe2afa906304b07e90c091d9ceedddc51e6e40976e767c4aee359bbaf9d2b378a769c6586a2b3866d31115ea8e389d85cad9102b2ae876810e14999f681725b220cb84cb7569f", 0xbe}, {&(0x7f00000006c0)="e2e7f8ee6f5ed13762983234b5026be4098e35713aa23781b3d114166cb3e60c64f56bc17f3f8123cb323259e46192e76effdaf08f206ca5e0148d06ca20349a3a08646283a511aa0fb44a4ccb794bb7a8a729", 0x53}, {&(0x7f0000000740)="96622b036161f7b0c586a807e4f193e199f6631085c8ddaac5d0af22fcd31cef1611e3edd62215f1545a51e5f6d4194e9dad3caa438b38241f17fb94f5edc519091bd762c76688ea97d63ad9ad964759fab83acb281f36f306444aa678b6a0de9f1923dc1315e60cff118cb9a3942a72c9f38b7272f0455d050706c12c22660437a3ac105a2f8dd6ae270478903f56b03eabfd50c370ded15a09c8639e8de44f49d8ee03a3638adcffea772a471616e9a7079d76729c8dd70c84e55f16ef459c83e4bb67198f4cb426b9aa9c32a4a6440e0633885b231380b42cd4e9797ce0e7a4cc98c68941bf2c7d245e194e391c6c398fbb3341aa", 0xf6}, {&(0x7f0000000900)="d9c7c1c811d770ed85fc88c316c47edbaa69f059b92ae5a533c04f180aadf551df6123c8945ac415a540b3aea53120f74d18eea402d4e984e7b79383bb2e7e018919f31d5b1bf75bf423f1297b05f6dba2bb873ddaadb5bba357892b22875344cc999b822218430a9257a3bcd7a049442db464cc28535144f67ac706fb69c19972f6a4ede957677cf9143ec7696e00b78121194a6f1a996448ab3d3bb6ee6c19a8b6aaefae0b63a9e9df017f6deaacb632db9e786443a53a47e782e9b9c499b1ed6c791b830315cc56b1a3a6bea376e316a1824ef4cb978368ee314e8053fb987f74593a5edb30bbab6cba2a0fa981b2c58b7dcc03553c", 0xf7}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="0630da6f47a32787a287bf06adf9cfc78c2e1ac70e35dc3a19ca0dddec76e5ad3951e5551995190bacb9cdb60cfe0ad8b4d0ea54be5dd48c29b44c80c1a010ae356e64624915bb5008d6c654467ec6369045a367c9c21e04a78d6351c013626257d7cd39fd07d8f06420f3011c723181e9259b7c26a892554fd7e3dafbee5bd08c918d0dc06ff8ab71f90fc97501a64ec751a92441fc2b7a9d6ba2796c81bbe9c6eaea5d9fe86d030bb8acfd", 0xac}, {&(0x7f0000000840)="ca9e88b23b1cb48b469cf360f485b01ab9a95aacb53d8a", 0x17}], 0x8, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000001b40)=@ipx={0x4, 0x0, 0x800, "e37fa681bfc0", 0x1}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001c80)="1ebebd534abfc08a5cf1960402269811930f78af00649c1d2b4171f0cd7eb4832108d5b243e8b4bb0dee7915211a3ca510c636e453bcd7ce3984484969409b620a62b182324a142e21e6f36267b9b7275bb1454d997d929efcf7ef582b2e5e3340f1d08f8e3f07cdd200b9159140f72870551664818258a8480879de53112023187ac7a2567695fdb0", 0x89}], 0x1, &(0x7f0000001d40)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18}}], 0x48}}, {{&(0x7f0000001dc0)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x90, 0x4}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001e40)="ffaf630f023f3a3eb46a691e3315462842540f840c2eb474c602a68952e3a046dfe25ee5ed5d2df29d15fd479b92387e04534a37ec514f00729396c4410e8ef339789448ea620d4a573f754e3427c7292fd969e292150f092f1847a827c4c425a46c0c4fb425d7a7ca0ceedb625b961c823545553501467c", 0x78}], 0x1, &(0x7f0000001ec0)=[@timestamping={{0x14, 0x1, 0x25, 0xb893}}, @mark={{0x14, 0x1, 0x24, 0xdf7b}}], 0x30}}, {{&(0x7f0000001f00)=@ax25={{0x3, @null, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="efdad4e12191eb9fcced84dfdc81b128473f837d21df1d6c4a2e96542690e47dfbee88f930d355ed607def9f3b770533fbb7b8432065c2c025460bf155772619a9b0999d67bf2899add105ca9ca21fbaa720ffce133a9f310358949bbe9f10ed813f884452bd294ebc08e4c9f2401800cd", 0x71}, {&(0x7f0000003000)="725bb46061e16202a5bf18809b123d8d88be7479525c79a01b32258ed27b0388c318352f692449f47b742dda64acd4575cc78f4da9db6abb99f0dae75915d0f57e4eb1fa3ebae5cde342de75aaf90a749fb54ba8509f098eb21dfab5daa8e4e8eeaeed74d2a904222aa0fbcd5661f4dd26ad469425e8e7283a93daca95c6ca586ede203bef46768c7976e3308401da0f8ab2e53e2baf0ecb14ea45918f9c61e70c78be3ad7df27a38be47e9eabdb366d0d00aca5535073", 0xb7}], 0x3, &(0x7f0000003100)=[@timestamping={{0x14, 0x1, 0x25, 0xdfe9}}, @timestamping={{0x14, 0x1, 0x25, 0xaf}}], 0x30}}], 0x6, 0x400c051)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r2, &(0x7f0000000500), 0x37d, 0x0)
flistxattr(r2, &(0x7f00000000c0)=""/154, 0x9a)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0)
ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f00000032c0))

17:48:15 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
creat(0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0xffffffab, 0x0, 0x0, 0x0)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000180)="8f060f6da15b50cb6c14de829f138ffead84e88deee4eed5beff1c3d8ffde665306653c2689ec157c7a9d4f4357629a409e653c7b006e74ebfad3ceb0af27a9746927088a825f787c4b6d0b27b7b7e5c95c375b5bd8b4a5b57e4e3bf38808227aead0922ea331c1843a8f9d6f818179d977e2c561077d8e0860081c560f2d486a5fe783cc04c32dd56db8aeb7a5adb3d90d3f61262e752268336ab656842ec60ea2bbbfac229fe1d0946c31a2ca5c3d3201f8223b6608cbba2e03fe181dc2274e6310e768deed2ad0ec572637680fe11a22f7df03026675fc08670312f79aa69a559d1aa8bec8db3", &(0x7f0000000280)=""/248, &(0x7f0000000380)="d9daefc9005a60127b77086873e22e6da0a2d38c080af7b70780ac07187b05e1cb2afba74d1a2a9dbf6c677983572684fe8dfa27282b7ab871f88d036481caabcdafaba0ac70cc8d16bf0aef43b76b8d9086f29b68dc19bbd35c37041d2191e98f92d12b0cf97e156a88af3916f3c142321a92fa0783c39a22b57b48", &(0x7f00000004c0)="3ec456053f3fd0d37f440357a0a704a83eccd00d0455634c19923fc4eab2e49b2f1e77fa307901883c4d7f5a323578a4f092abb7cdaa551dcbb55f0707c888dc2a808443f72a355cbc641b7be207c5e0f4971e978f39976fedf7e2f179539da4c06200", 0x2, r0}, 0x38)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000474a00000008000c0f1fa33d56b61600000000000020000000"], 0x1c}}, 0x0)

[  752.512402] ptrace attach of "/root/syz-executor.4"[6355] was attempted by "/root/syz-executor.4"[9849]
[  752.564796] ptrace attach of "/root/syz-executor.4"[6355] was attempted by "/root/syz-executor.4"[9858]
17:48:15 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:15 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r3, &(0x7f0000000500), 0x37d, 0x0)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 4:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\a')
close(r1)

17:48:15 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000180))
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:15 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10)
r2 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0xfdfffffe, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x80000)
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x1})
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r6, &(0x7f0000000500), 0x37d, 0x0)

17:48:16 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0xffffffffffffffff, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x410181, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r3, 0x1}}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000180))
preadv(r4, &(0x7f0000000500), 0x37d, 0x0)

17:48:16 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:16 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0xffffffffffffffff, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, 0x0, 0x0, 0x0)
statx(r3, &(0x7f0000000000)='./file0\x00', 0x100, 0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4})
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r5, &(0x7f0000000500), 0x37d, 0x0)

17:48:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080fffffffe)

17:48:16 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01d90000", @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r3, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0xffffffffffffffff, r2)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:16 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

17:48:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x4000000}, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/rt_cache\x00')
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200))
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x20000003)
r4 = accept4(r3, 0x0, 0x0, 0x0)
connect(r4, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x1, 0xd7}, 0x8)
preadv(r2, &(0x7f0000000500), 0x37d, 0x0)

17:48:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, r2, 0x0, 0x0)

[  754.155921] audit: type=1804 audit(1590256096.808:126): pid=9957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir704489637/syzkaller.7irqVC/930/bus" dev="sda1" ino=16661 res=1
17:48:17 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:17 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r1, &(0x7f0000000500), 0x37d, 0x0)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e24, 0x0, @private0}, 0x1c)
listen(r2, 0x20000003)
r3 = accept4(r2, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8)

17:48:17 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

[  755.120501] audit: type=1804 audit(1590256097.659:127): pid=10008 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir704489637/syzkaller.7irqVC/930/bus" dev="sda1" ino=16661 res=1
[  755.145287] audit: type=1804 audit(1590256097.659:128): pid=10009 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir704489637/syzkaller.7irqVC/930/bus" dev="sda1" ino=16661 res=1
[  755.169421] audit: type=1804 audit(1590256097.769:129): pid=10013 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir704489637/syzkaller.7irqVC/930/bus" dev="sda1" ino=16661 res=1
[  755.194255] audit: type=1804 audit(1590256097.779:130): pid=9977 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir704489637/syzkaller.7irqVC/930/bus" dev="sda1" ino=16661 res=1
17:48:17 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:17 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000180)="4179654d671b37e41fb94ca668d290bf838b89dd6e44d0b8f0a181e8c12ebbfe4712f3833464b95dd289b4564ca62730219914bf43a841096dd0213c0e77095ad389714c3d6903ba9866a511c479d11da6289bf4b9a21af7ec0bea87a3aaa01b5f10df0307a0909adf6cd256c1d1d4de60330675360d6d3e6b2562f77143718cbbc82ab04df4e896124568a52422e6d28b6a75c8ed628ec2ad62097168b9db273615ff76004a55f02f4c3d9737d2c2665e97887d12c8674c767939854ee81ab93b120186c3ba30499f2f5ebd57e2751ec60bd69d270f1df307dc2eb556e2805ea88015a755b654e20485", &(0x7f0000000280)="3bec60d9a5e352a4bbaa05e5d51b0ceffa81e5f2baf772f5da647c4d0b78c9b7cd4563dbfd2d6d6f149bdec3fdad5077b445511384913b5f3d414cfee8699bd7eaf66a6098e4d3b26e1017aa4122074e85409309380630ed0206b6bacd7508fbf0ad7cc803f080f6e071c21eed253cf5846ad6", 0x4}, 0x20)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000400)=@buf={0xd6, &(0x7f0000000300)="85c29feb6e918a394fd7a996168645efbc4bbf38844d6ca70f247a0186dcf4f7fde51db24b2e4f5d8568e2dc7457ff73a76550aa1647b9f3bb3fb11df4451e591314cd0c94d4d1f33b18c2c48a2beafd78a857c2270b9164374f79664a23af2a3380794b5e0aee76d9a3aba5386c70be521ffac7fe556364ef840c9f692cc60ca07f218b03ca218439c74ffc6d82c98d0cd78c006c1778860883e421b43bc43fe8f124b976df927510b8a9942d8922ad31a8509a3f4d7cfd965fcb284781f47b75620626142c8ccf8919b8de06194d9aa760bd11de00"})
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:17 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

17:48:17 executing program 4:

17:48:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000000)={0xa8, 0xe, &(0x7f0000000200)="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"})
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r1, &(0x7f0000000500), 0x37d, 0x0)

17:48:17 executing program 4:

17:48:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x6000)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r2, &(0x7f0000000500), 0x37d, 0x0)

17:48:18 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100))
ptrace(0x10, r2)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)

17:48:18 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:18 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:18 executing program 5:

17:48:18 executing program 4:

17:48:18 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:18 executing program 5:

17:48:18 executing program 4:

17:48:18 executing program 4:

17:48:18 executing program 5:

17:48:18 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  755.906673] UHID_CREATE from different security context by process 3163 (syz-executor.3), this is not allowed.
17:48:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in, &(0x7f0000000000)=0x80, 0x800)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
preadv(r1, &(0x7f0000000500), 0x37d, 0x0)

17:48:18 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:18 executing program 5:

17:48:18 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @null='               \x00'}, 0x12)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000022000100000000f1ffffff000400000008000c002d51579b2ec4917c6b938d0e8643ee6206d346871f2c36b1cc7f5c32eb3ad3c29fc995849033574c5442bb38b2697170be555a2f86f9291ce07492c47601e3aeeb4dc345f7b2964cc2c410a7217a2c907ed02efa1a6b94713b32bae259211b509120fbe6aff4f380a06355a5a6d19c4bc93ac038583ce4cdbaba984f03f0f218a416971898c146c6e1f1832cd549640e216e26ceff8000820439670e3f8c26990b1669767a7f4a31d98251c586bb0092404495e6a877f5f4"], 0x1c}}, 0x0)

17:48:18 executing program 4:

17:48:18 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:18 executing program 5:

17:48:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r1 = getpid()
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvme-fabrics\x00', 0x40880, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000004c0)={r5, 0x1}, 0x8)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0)

17:48:19 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:19 executing program 4:

17:48:19 executing program 5:

17:48:19 executing program 1:

17:48:19 executing program 4:

17:48:19 executing program 1:

17:48:19 executing program 3:

17:48:19 executing program 5:

17:48:19 executing program 4:

17:48:19 executing program 1:

17:48:19 executing program 3:

17:48:19 executing program 5:

17:48:19 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:19 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05aa4f5089d6aefe280010000000140001"], 0x28}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40084}, 0x880)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x44}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0xc000)

17:48:19 executing program 4:

17:48:19 executing program 1:

17:48:19 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0)

17:48:19 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
ioprio_get$pid(0x3, r2)

17:48:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

17:48:19 executing program 4:
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x25, &(0x7f0000000000)="e4cbbf3b67e0ae9fbe2f920ed02d1f33", 0x10)

17:48:19 executing program 4:

17:48:19 executing program 5:

17:48:19 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:19 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x0, 0x0, 0xc0, 0x0, 0xc0, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@remote, @remote, 0x0, 0x0, 'macvlan0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)

17:48:19 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78)

[  756.893524] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  756.912859] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
17:48:19 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mknod$loop(&(0x7f0000000140)='./bus/file1\x00', 0x6000, 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
stat(&(0x7f0000000100)='./bus\x00', 0x0)

17:48:19 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x40000, 0x0, 0xc0, 0x0, 0xc0, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@remote, @remote, 0x0, 0x0, 'macvlan0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)

17:48:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  757.219798] Cannot find set identified by id 0 to match
17:48:20 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mknod$loop(&(0x7f0000000140)='./bus/file1\x00', 0x6000, 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
open(&(0x7f00000000c0)='./bus/file1\x00', 0x0, 0x0)

17:48:20 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:20 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
connect(0xffffffffffffffff, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000180)={@loopback, @local, @multicast2}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000240))
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000ba74da5fc223b69d7400df5a", @ANYRES16=r3, @ANYBLOB="04002abd7000fddbdf250300000008000c000100000008000c000200000006000b001500000014000600fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4000051}, 0x44040800)

17:48:20 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002a000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0)

17:48:20 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r1, 0x40047454, 0x0)

17:48:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0)

[  757.599055] IPVS: ftp: loaded support on port[0] = 21
[  757.613397] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection.
17:48:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="e4cbbf3b67e0ae9fbe2f920ed02d1f33", 0x10)
socket$inet(0x2, 0x0, 0x84)

17:48:20 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0)

17:48:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x8004ae98, 0x0)

17:48:20 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x51}, 0x45c)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000080)=""/30, 0x1e)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

[  758.018743] input: syz1 as /devices/virtual/input/input269
17:48:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0)

17:48:20 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:21 executing program 1:
perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece)
fcntl$setsig(r1, 0xa, 0x12)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x280076ed, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x10002, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000012c0)='\f&', 0x2, 0x801, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x16)

17:48:21 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:21 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @ipv4={[], [], @remote}}, 0x1c)
sendmmsg(r0, &(0x7f0000001980), 0x5c9, 0x2000f760)

[  758.789863] input: syz1 as /devices/virtual/input/input270
[  758.813275] IPVS: ftp: loaded support on port[0] = 21
17:48:22 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r1, 0x40047454, 0x0)

17:48:22 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(tnepres)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

17:48:22 executing program 1:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x4080, 0x0)

17:48:22 executing program 4:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0)
write$9p(r0, &(0x7f00000001c0)="0600000000000000c9b90003020000002a1ff7adf55587fe277fde18fa02249e1dabdd9514480a16f3733d18f833b3aacf8a249e3d00000000ed6861ff00"/78, 0x4e)

17:48:22 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40a00, 0x0)
ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000040)={0x1, 0x9, 0x47a8})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, [], 0x1}}}, [0x7, 0x0, 0x4, 0xffffffffffffff64, 0x9, 0x2d08, 0x1, 0x0, 0x4, 0xbc, 0x1, 0x40, 0x6]}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc}]}, 0x1c}}, 0x0)

17:48:22 executing program 4:
perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece)
fcntl$setsig(r1, 0xa, 0x12)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x16)

17:48:22 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xffdffffc}], 0x1, 0x0, 0x0)
socket(0x11, 0x800000003, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00')
preadv(r0, &(0x7f00000017c0), 0x333, 0x4c00)

17:48:22 executing program 3:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c0, 0x0, 0x1e8, 0x558, 0x1e8, 0x328, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, &(0x7f00000003c0), {[{{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @private1, [0xff000000, 0xff000000, 0x0, 0xff000000], [0xff, 0xfffffe01, 0xffffff00], 'erspan0\x00', 'syzkaller1\x00', {0xff}, {}, 0x3b, 0x3f, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, [], 0x1}, @ipv6=@private1={0xfc, 0x1, [], 0x1}, 0x1c, 0x21, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast2, 0x1e, 0x14}}}, {{@ipv6={@private1, @private0={0xfc, 0x0, [], 0x1}, [], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'gretap0\x00', 'ip6gre0\x00', {}, {}, 0x2b, 0x0, 0x6, 0x45}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x8, [0x6a5b], 0x0, 0x20, 0x1, [@loopback, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, @mcast2, @empty, @mcast1, @dev={0xfe, 0x80, [], 0x19}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={[], [], @multicast1}, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xf7, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x3ff, @ipv4, 0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xd811)
ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000300)={0x0, 0x7, 0x1})

17:48:22 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:22 executing program 1:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB])
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

17:48:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000080))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00')
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000140)=0xa5, 0x8)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x206, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)

[  760.049998] 9pnet: Could not find request transport: 0xffffffffffffffff
[  760.162273] 9pnet: Could not find request transport: 0xffffffffffffffff
17:48:23 executing program 5:

17:48:23 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil)

17:48:23 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:23 executing program 3:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x4080, 0x0)

17:48:23 executing program 5:

17:48:23 executing program 2:

17:48:23 executing program 3:

17:48:23 executing program 5:

17:48:23 executing program 1:

17:48:23 executing program 4:

17:48:23 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:23 executing program 5:

17:48:23 executing program 1:

17:48:23 executing program 4:

17:48:23 executing program 3:

17:48:23 executing program 2:

17:48:23 executing program 1:

17:48:23 executing program 1:

17:48:23 executing program 4:

17:48:23 executing program 5:

17:48:23 executing program 2:

17:48:23 executing program 4:

17:48:23 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:23 executing program 1:

17:48:23 executing program 3:

17:48:23 executing program 5:

17:48:23 executing program 2:

17:48:23 executing program 4:

17:48:23 executing program 2:

17:48:23 executing program 1:

17:48:23 executing program 3:

17:48:23 executing program 4:

17:48:23 executing program 5:

17:48:23 executing program 2:

17:48:23 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:23 executing program 1:

17:48:23 executing program 3:

17:48:23 executing program 4:

17:48:23 executing program 5:

17:48:23 executing program 2:

17:48:23 executing program 4:

17:48:23 executing program 3:

17:48:23 executing program 2:

17:48:23 executing program 5:

17:48:23 executing program 1:

17:48:23 executing program 4:

17:48:24 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:24 executing program 3:

17:48:24 executing program 2:

17:48:24 executing program 5:

17:48:24 executing program 1:

17:48:24 executing program 4:

17:48:24 executing program 1:

17:48:24 executing program 4:

17:48:24 executing program 2:

17:48:24 executing program 5:

17:48:24 executing program 3:

17:48:24 executing program 4:

17:48:24 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:24 executing program 1:

17:48:24 executing program 5:

17:48:24 executing program 3:

17:48:24 executing program 2:

17:48:24 executing program 4:

17:48:24 executing program 3:

17:48:24 executing program 5:

17:48:24 executing program 1:

17:48:24 executing program 4:

17:48:24 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r1, r2, 0x0, 0x102000003)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100)=0x72, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)

17:48:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x438, 0x0)
sendfile(r2, r1, 0x0, 0x100100000000)

17:48:24 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:24 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
linkat(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1400)
syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x31c, 0x34f9}], 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x3800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000540)={'veth0_to_batadv\x00', {0x2, 0x0, @dev}})
creat(&(0x7f0000000180)='./file0\x00', 0x0)

17:48:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
linkat(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1400)
syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x319, 0x34f9}], 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000540)={'veth0_to_batadv\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}})
creat(&(0x7f0000000180)='./file0\x00', 0x0)

17:48:24 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(tnepres)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

17:48:24 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="a8e06e690800000000000000a5bfed7b2fac6200c388", 0x16}, {&(0x7f0000000840)="5999d81f417be991695c1a4f5059f726ebe2a5fca73c4067c797e9ad4b5384eae93a926d2d569a28e06cd628dc09f252d947d583c72754825ac3d5e12bdfe2ddf2b592a884e653ef6f2c0e3582c09443a44f5ccba1418263182eea2d303fe2446256b1d4be7458a83e60620fe775476a1c03371007c486dd890aad01195da821cb664f20177516a77231d1f6e339def49ab7", 0x92}, {&(0x7f0000000900)="bf0d505d81d5e16992455b5fa6b5c2763c1bece0ab8a802b993e0041d8269ecb890e6dfe00bce9a85ac71baa0200d763b443ff65c1aa50ac7f247a2c697732eb9cedbc561e27db87f327ce4a96c694c573f378fe4c73b620eb220be82957261aca91cb594fa01683bf6d3c5597762728ca917d0c38cc21e1bf5e73ecc3e75074620404c945d595d451df4de213c0a3f26491e0990788cc5d4dda6cb963f6a171cf9a3925f2cd97db05d78b74ae87716d797bd73bc5afd8f33b73c52dbe56badfd2cbc4e8ea6f0f34", 0xc8}], 0x3, 0x81003)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r2, r3, 0x0, 0x102000003)
setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100)=0x72, 0x4)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

[  761.889477] audit: type=1804 audit(1590256104.539:131): pid=10512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir762256094/syzkaller.dc6ydB/1185/cgroup.controllers" dev="sda1" ino=16149 res=1
17:48:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000840)='Y', 0x1}, {&(0x7f0000000900)}], 0x2, 0x81003)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r1, r2, 0x0, 0x102000003)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000180))
syz_init_net_socket$rose(0xb, 0x5, 0x0)

17:48:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0)

17:48:24 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
getpid()
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
memfd_create(0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x102000003)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

17:48:24 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
linkat(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1400)
syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8ee1eb0638671f9554cc616134fad42a3b79eb", 0x31b, 0x34f9}], 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

17:48:24 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000017c0), 0x218, 0x0)

17:48:24 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  762.637441] audit: type=1804 audit(1590256105.289:132): pid=10512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir762256094/syzkaller.dc6ydB/1185/cgroup.controllers" dev="sda1" ino=16149 res=1
17:48:25 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:25 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfbfffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={@ipv4={[0x0, 0x5, 0x4], [], @initdev}, 0x0, 0x0, 0x0, 0x2}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
fchdir(0xffffffffffffffff)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
write(r4, &(0x7f0000000600)="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", 0xe00)
sendfile(r4, r5, 0x0, 0x12000)
socket(0x0, 0x0, 0x0)

17:48:25 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
read$FUSE(r0, &(0x7f00000040c0), 0x14ec)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50)
write$FUSE_ATTR(r0, &(0x7f00000005c0)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff4b67}}}, 0x78)

17:48:25 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4002)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])
r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
fchdir(0xffffffffffffffff)

17:48:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/66, 0x42}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
clock_gettime(0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x187}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40012, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  762.852199] audit: type=1804 audit(1590256105.499:133): pid=10560 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir881795259/syzkaller.VNprHC/1024/bus" dev="sda1" ino=16692 res=1
[  763.134642] audit: type=1800 audit(1590256105.669:134): pid=10571 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16693 res=0
17:48:26 executing program 2:
syz_emit_ethernet(0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08"], 0x0)

17:48:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19df}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4002)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)
fchdir(0xffffffffffffffff)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)})
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x0, [], "3ea833eb359c5c21b3d3ecd5e86bef2a"})
openat$null(0xffffffffffffff9c, 0x0, 0x46002, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140))
ptrace(0xffffffffffffffff, 0x0)

17:48:26 executing program 1:
perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x6, 0x0)
open(0x0, 0x0, 0x0)

17:48:26 executing program 5:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void}, 0x0)

17:48:26 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:26 executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7311e11c00009b12c31eae7594f53ca5d747ee7bdb6e4d652c0800000041d1d938ed2900104bf7bd29ab62"], 0xff86)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x20000040)

17:48:26 executing program 2:
syz_emit_ethernet(0x223c, &(0x7f00000023c0)=ANY=[], 0x0)

17:48:26 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
pipe(&(0x7f0000000300))

17:48:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
fcntl$setstatus(r0, 0x4, 0x4002)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:48:26 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:26 executing program 1:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0xb9)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close(r1)
accept4(r0, 0x0, 0x0, 0x0)
close(r1)

17:48:26 executing program 2:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0xb9)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="e4", 0x1}], 0x1}}], 0x1, 0x0)
close(r1)
accept4(r0, 0x0, 0x0, 0x0)
close(r1)

17:48:26 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000100), 0x8)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040), 0x10)

17:48:26 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:26 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x3, 0x60}, 0x14}}, 0x0)

17:48:26 executing program 2:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x10, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, 0x0, &(0x7f0000000900)=[{}, {}, {}]}, 0x108)

17:48:26 executing program 1:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @local, @void}, 0x0)

[  763.833070] dccp_close: ABORT with 1 bytes unread
[  763.844914] dccp_close: ABORT with 1 bytes unread
17:48:27 executing program 3:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast2, @broadcast, @multicast2, @dev, @remote, @rand_addr, @rand_addr, @multicast2, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0)

17:48:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000edff44944eeba71a4976e252ab2cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000081ffffffffffffff039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000000e6ff0000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x65)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="d00800002400ffffff7f12000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003080000050008a000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f35000100000001040000120600000000000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000e900000000000000c0000000c0ffffff08000000018000000101000006000000b3000000000000200500000001040000040000000700000008000000010100f8c12e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000070000000001000080040000000400000000100000040000000700000009000000fcffffffdeff0000010000000900000000020000060e0000080000000240000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed0000000101000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b600000004000000efc9000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f060aee3d3cca56e16f1f000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0)

17:48:27 executing program 5:
syz_emit_ethernet(0x11a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "80f009", 0xe4, 0x2c, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x0, 0x6, "7d8850", 0x0, 0x0, 0x0, @private1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, [@fragment={0x0, 0x0, 0x0, 0x1}, @routing={0x0, 0x6, 0x0, 0x0, 0x0, [@loopback, @dev, @rand_addr=' \x01\x00']}], "d45aa575a3cec886e48c1758dcd87830e72408666a681fcfcaafdd4f52fb747f81b1b3f9bf92c7e87a27c0412890a75abb91d93351debeb113b3e02d282c8a3b54fd32f43753b357592fdfd1e80ee6339c856c7e14871abf70a55830cf2b8903f8dccc7a2a2312becafec114d0fb922c6dfe79b6"}}}}}}}, 0x0)

17:48:27 executing program 4:
syz_emit_ethernet(0x102, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa86dd6d"], 0x0)

17:48:27 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x48)
listen(r0, 0x0)
unshare(0x0)
r1 = accept(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0)

17:48:27 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:27 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0xf)

[  764.470701] netlink: 1156 bytes leftover after parsing attributes in process `syz-executor.2'.
17:48:27 executing program 4:

17:48:27 executing program 2:

17:48:27 executing program 3:

[  764.518658] netlink: 1156 bytes leftover after parsing attributes in process `syz-executor.2'.
17:48:27 executing program 5:

17:48:27 executing program 4:

17:48:27 executing program 2:

17:48:27 executing program 4:

17:48:27 executing program 3:

17:48:27 executing program 5:

[  764.652407] audit: type=1400 audit(1590256107.309:135): avc:  denied  { setopt } for  pid=10641 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1
17:48:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2501000000140002007767320000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843b40408807000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200db8859f50d7c7cfb5d95b29ab40f5757b2289543e65562f16cfe8f8f40154e351400040002000009ac1e0101000000000000000008000a000100000008000a00010000009003008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000a00010000001400040002004e200000000000000000000000001400040002004e21ac1e0001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff140309804c000080060001000a00000014000200fe8800000000000000000000000001010500030050000000060001000a00000014000200ff0200000000000000000000000000010500030041000000f4000080060001000200000008000200ac1414aa0500030012000000060001000200000008000200ffffffff0500030008000000060001000200000008000200ac1414aa0500030007000000060001000a0000001400020000000000000000000000ffff7f0000010500030028000000060001000200000008000200ac1e0001050003000300000006000100020000000800020000000a2b0500030019000000060001000200000008000200ac1414bb0500030005000000060001000200000008000200e00000020500030005000000060001000a00000014000200fe8000000000000000000000000000aa050003006e000000a0000080060001000a00000000000204000000000000000000000000000000010500030010000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200000000000000000000000000000000010500030023000000060001000a00000014000200fe800000000000000000000000000030050003006b000000060001000200000008000200e0000001050003001f00000030010080060001000a00000014000200000000000000000000000000000000000500030064000000060001000200000008000200000000000500030011000000060001000200000008000200ac1414bb050003000900000006000100020000000800020000000005050003001b000000060001000200000008000200ac14143a0500030004000000060001000a00000014000200fe8000000000000000000000000000aa050003007b000000060001000a00000014000200000000000000000000000000000000010500030030000000060001000a00000014000200fe8000000000000000000000000000210500030072000000060001000a00000014000200ff010000000000000000000000000001050003001e000000060001000200000008000200ffffffff0500030009000000740000801400040002004e23cc1414aa000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221400040002004e247f00000100000000000000003c000080060005004b4b000008000a00010000001400040002004e23ac1414aa00000000000000001400040002004e22ac141443000000000000000014000200776731000000000000000000000000000800050001"], 0x51c}}, 0x0)

17:48:27 executing program 3:

17:48:27 executing program 2:

17:48:27 executing program 4:

17:48:27 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:27 executing program 5:

17:48:27 executing program 2:

17:48:27 executing program 3:

17:48:27 executing program 4:

17:48:27 executing program 5:

17:48:27 executing program 1:

17:48:27 executing program 2:

17:48:27 executing program 4:

17:48:27 executing program 3:

17:48:27 executing program 1:

17:48:27 executing program 2:

17:48:27 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x200000000000000, 0x7}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fsync(r2)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc247e70a8d4051a3}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = gettid()
tkill(r4, 0x3c)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0)
syz_read_part_table(0x9, 0x2, &(0x7f0000000100)=[{&(0x7f0000001380)="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", 0x1000, 0xffffffff7bffffff}, {&(0x7f0000000380)="19b893d503dc6efddc58ad9ee50e0393784e9f3f4fa50e95769f4925f17ba034c7fd1a897b2620eea15b2c72d05d4c4a0999277a7feaaefc4d2b39224e527b0f666caefb1d7e1fa73a0550b08b5b2ca7f62b47e0c474dbfe6fc009366326de0de7c89fae40290770f32e5fd96c2bb24714a884f4bdba30a14449cef785f306b92ccea7bf49d8c31d00de2f9ac9ffc253ee123f83e0519dfa6af6db0910e67740944e48cbc5e0b1c8c1641505d844ca63abc74db4", 0xb4, 0x3}])
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x98240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="3bbf5140972d336cf3af0000002a394769b2d977837c7f9488000029b5192c2801380634a68ac98901141a1a0093467a050dc546aa74b4ab8a000057d9770e351fdcd5b6ddd5cf06fc8cda4aa4d86ab94db9060000000000000004100d613f9c73ee36e214edebaa40c19fe2f862bda49f8b5fb39753f4cf780500014d7049e29627e0c8695a65fdd08421e40a6c1c18e176006776370fdf46cf9b466f6c09cd89c6aa073c15fa1e8880f65a31ad8870fbb7afc2733868443a4acf394dfeba03000000b9160421e2acff210800bc4b3708ba96f8958b0757e4d3c319952eaca9fa5249acdc498d326be940a07066560220d4549dda30c58a8b898eb1fac4a278947126830af701a43ea31fbee4ccf9ec932e7d498060116ccb222df53a39b20613d07fc5e841d0f4f134c08e89bfe9e3b2a1aa46494282f6b77d8076a816d77e1529b9c2f233468a856c58543d1bd83a67e5d7fe1fae173720de7e28bdb5dde817895ad4e0ce066285c4974fe955e906ce78d567d7561830253f11646aed479d5bdd24568fc80589f7"], 0xa2)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

17:48:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r0}, 0x87e9b1a5bf03cec0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)

17:48:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4092, 0x0, 0xffffff99, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x88)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000380))
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:27 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0xc04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

17:48:27 executing program 2:

17:48:27 executing program 2:

17:48:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0x3, 0x0}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0x3, 0x0}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  765.351999] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040
[  765.460677] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002a
[  765.499454] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000019
[  765.538799] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000046
[  765.540152] kvm [10706]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
17:48:28 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:28 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r0}, 0x87e9b1a5bf03cec0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20041)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)

[  765.580767] kvm [10707]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024
[  765.600675] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000005
[  765.607547] kvm [10706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000062
[  765.617129] kvm [10707]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000086
[  765.632465] kvm [10685]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000007c
17:48:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x88)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:28 executing program 4:
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000100)=[0x6, 0x4, 0x0, 0x6, 0x81], 0x5, 0x6, 0x7, 0x600, 0x2, 0x9, 0x236, {0x6, 0x2, 0xeff8, 0x1, 0x8, 0xff, 0x0, 0x3, 0x8, 0x362, 0x2, 0x8, 0x10001, 0x3, "81171ac995240d6184cca91c0340501ad6899f1da2bbaf7e087bf2643ffdccc6"}})
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79c, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceb, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000006, 0x0)
write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xfffffd2d)
fcntl$setpipe(r2, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x135)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x1b, 0x1, '#,vboxnet1ppp0vboxnet0\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'em0wlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x10000)
unlink(&(0x7f0000000040)='./file0\x00')

17:48:28 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

17:48:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:28 executing program 5:
creat(&(0x7f0000000100)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000))

17:48:28 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:28 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x2, 0x120002)
sendfile(r0, r0, 0x0, 0x9)

17:48:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1)
write$binfmt_misc(r3, &(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x15)
splice(r2, 0x0, r4, 0x0, 0x19404, 0x0)

17:48:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:29 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
open(0x0, 0x141042, 0x0)
write$P9_RREAD(r0, &(0x7f00000000c0)={0x7b, 0x75, 0x1, {0x70, "4a26668dca4ba5d13d08bb1f8284a4f9e9dc761d39bc559c4226cbb22fd93fecf91cacf2dd6abb78661afe121f42dd06386a80f9e414a8f3f9b249bff019722f4119a0f110b433b9459a7db31a063773c98c770f22ec98192ab8d007417a428a543d4935fe4df30a3363d38464a2473c"}}, 0x7b)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040094}, 0x10)

17:48:29 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00')
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x87e9b1a5bf03cec0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0)
r3 = dup2(r1, 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001b89e142b18b82d720bca6509d6ea2e3f613b94beffd48a8bc030caa8fa00e613277bfbc6817b420b39c3a625c01880d63f98b0d7cce0f12ff900ef4aa7c5b6bd33b0e9dc7b8e974475a3dffde186b602edcebfdd8108f547844c25e3c", @ANYRES16, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24000041)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000001c0))
recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)

17:48:29 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

17:48:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:29 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="1132a0549ce8", @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

17:48:29 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:29 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:29 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
open(0x0, 0x141042, 0x0)
write$P9_RREAD(r0, &(0x7f00000000c0)={0x7b, 0x75, 0x1, {0x70, "4a26668dca4ba5d13d08bb1f8284a4f9e9dc761d39bc559c4226cbb22fd93fecf91cacf2dd6abb78661afe121f42dd06386a80f9e414a8f3f9b249bff019722f4119a0f110b433b9459a7db31a063773c98c770f22ec98192ab8d007417a428a543d4935fe4df30a3363d38464a2473c"}}, 0x7b)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040094}, 0x10)

17:48:29 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:29 executing program 5:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
pread64(r1, 0x0, 0xfeffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
dup2(r5, r1)

17:48:30 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:30 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

17:48:30 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)
open(0x0, 0x141042, 0x0)
write$P9_RREAD(r0, &(0x7f00000000c0)={0x7b, 0x75, 0x1, {0x70, "4a26668dca4ba5d13d08bb1f8284a4f9e9dc761d39bc559c4226cbb22fd93fecf91cacf2dd6abb78661afe121f42dd06386a80f9e414a8f3f9b249bff019722f4119a0f110b433b9459a7db31a063773c98c770f22ec98192ab8d007417a428a543d4935fe4df30a3363d38464a2473c"}}, 0x7b)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040094}, 0x10)

17:48:30 executing program 4:
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffd2d)
mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x10)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
getpid()
unlink(0x0)

17:48:30 executing program 5:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0)

17:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:30 executing program 4:
prlimit64(0x0, 0x9, &(0x7f0000000600), 0x0)
io_setup(0x2342, &(0x7f0000000100))

17:48:30 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:30 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29a", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7"])
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r1, 0x0, 0x800000080004103)

17:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:48:30 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:30 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074fe532a6f78014182d6c0000000000"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:48:30 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:30 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:30 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:48:30 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:31 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbXE\x00'/19, 0x0)
splice(r0, 0x0, r2, &(0x7f0000000100), 0x400000000003, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r3, 0x16)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7)

17:48:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xfffffd2d)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x4, 0x3}, 0x0)
mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2a2)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
getpid()
unlink(&(0x7f0000000040)='./file0\x00')

17:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:31 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:31 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:31 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:31 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0xf, &(0x7f00000013c0)={&(0x7f00000000c0)={0x18, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x4, 0xd, 0x0, 0x0, @u32}]}, 0x18}}, 0x0)
pipe(0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x801)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0xc000)

17:48:31 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0x2}], 0x492492492492805, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

17:48:31 executing program 5:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x151042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x4000000000010046)

17:48:31 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:31 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:32 executing program 5:

17:48:32 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:32 executing program 5:

17:48:32 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:32 executing program 5:

17:48:32 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:32 executing program 1:

17:48:32 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:32 executing program 5:

17:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:32 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:32 executing program 1:

17:48:32 executing program 5:

17:48:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:32 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x40eae, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')

17:48:32 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:32 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:32 executing program 1:
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000000000/0x3000)=nil, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)

17:48:33 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:33 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:33 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="620af8ff02000021bfa100000000000007010000f8ffffffb702000003000000bd12000000000000850000000f000000b70000000000000095000000000000003faf4f2aa3d9b18ed8a25312a2e2c49e80a32e8cf1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e906f2d08002d75593a286cecc93e6427c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec28b48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364141215106bf04f658333719acd97cfa107d40224edc5465a932b77e74e80220d42bc6099ad230a198802a778be00000000006ef6c1ff7224ac913f33f5fdc63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d17cf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de091a9c8452a823ebdc66be057c273a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62c6faec2fed44da4928b3014bf9b14334e16cb9a6298060d6b2ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a6eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c0200000000000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42013d53046da21b48216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d12000000000000000000000000e09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee581eee52bf1dc7ffc1969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be50c72d978cf06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598522d3e959efc71f66cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86506964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63c96ec8485b3b8a8c9aa3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e95710038ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b681c74cfd4e2351bfb37114bd462e652fc40eed63ac9ef40bb4148a5feabe52341c100378ac8264c0a81b325625b27e9da0482c8be6b00b8209ddfaca25671e25512bbb4559d9b168e460cdd47fd96904aa96544722628b49c7923c91540f738742485486da93f81ea0a420a58f3bab268f874b56b080ae5f3437f948254ac564e6eabde6184bfed90000000000000000006311a52a0bc381f67810ae52c070a85df5b5e1be02"], &(0x7f0000000100)='GPL\x00'}, 0x48)

17:48:33 executing program 1:
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@discard='discard'}]})

17:48:33 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:33 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:33 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:33 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:33 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:33 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r0 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r0, 0x1})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:48:33 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:33 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:33 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:33 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:33 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r0 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r0, 0x1})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:48:33 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:33 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:33 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r0 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r0, 0x1})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:48:33 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:34 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:34 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:34 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:34 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:34 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:34 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:34 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x854, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9}}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x11c}, {0xdc, 0x0, 0x0, 0x0, 0x0, 0x6}}}]}]}}]}, 0x884}}, 0x80efce34118cfa04)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080))
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)
set_thread_area(&(0x7f0000000100)={0x401, 0x0, 0x4000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1})

17:48:34 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:34 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:34 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:34 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:34 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  771.785366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11140 comm=syz-executor.1
17:48:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:34 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:34 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:34 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:35 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:35 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:35 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:35 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

17:48:35 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:35 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:35 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:35 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:35 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r1 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r1, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:35 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:35 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:35 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:36 executing program 3:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

17:48:36 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:36 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:36 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:36 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:36 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:36 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:36 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:36 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:36 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:36 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

17:48:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:37 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:37 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:37 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:37 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:37 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:48:37 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:38 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:38 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:38 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:38 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:38 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:38 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:38 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:38 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:38 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:48:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:39 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:39 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:39 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:39 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:39 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:39 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:39 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:39 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:39 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:39 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:39 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x0)

17:48:39 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:39 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x0)

17:48:40 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:40 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:40 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:40 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, 0x0, 0x0, 0x0)

17:48:40 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:40 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:40 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:40 executing program 0:
socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:40 executing program 0:
socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:40 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:41 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 0:
socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:41 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:41 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

17:48:41 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

17:48:41 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:41 executing program 0:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

17:48:41 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:41 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x0, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:42 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x0, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:42 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:42 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x0, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:42 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:42 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:42 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:42 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:43 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:48:43 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:43 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:43 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:43 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:43 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:44 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 5:
pipe(0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:44 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:44 executing program 5:
pipe(0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:44 executing program 5:
pipe(0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x81420000a77, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:44 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:44 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:44 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:45 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:45 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x78)

17:48:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:46 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x78)

17:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:46 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:46 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 3 (fault-call:5 fault-nth:0):
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:46 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:46 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  784.166526] FAULT_INJECTION: forcing a failure.
[  784.166526] name failslab, interval 1, probability 0, space 0, times 0
[  784.198955] CPU: 1 PID: 12060 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0
[  784.206913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  784.216277] Call Trace:
[  784.218878]  dump_stack+0x1b2/0x283
[  784.222520]  should_fail.cold+0x10a/0x154
[  784.226683]  should_failslab+0xd6/0x130
[  784.230667]  kmem_cache_alloc_node+0x25f/0x400
[  784.235260]  __alloc_skb+0x9a/0x4c0
[  784.238895]  ? __kmalloc_reserve.isra.0+0xd0/0xd0
[  784.243740]  ? netlink_autobind.isra.0+0xa9/0x290
[  784.248583]  ? netlink_autobind.isra.0+0x1c5/0x290
[  784.253541]  netlink_sendmsg+0x921/0xbb0
[  784.257613]  ? nlmsg_notify+0x160/0x160
[  784.261589]  ? move_addr_to_kernel.part.0+0xf0/0xf0
17:48:46 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  784.267191]  ? security_socket_sendmsg+0x83/0xb0
[  784.267205]  ? nlmsg_notify+0x160/0x160
[  784.267218]  sock_sendmsg+0xb5/0x100
[  784.267229]  ___sys_sendmsg+0x349/0x840
[  784.267239]  ? trace_hardirqs_on+0x10/0x10
[  784.267249]  ? copy_msghdr_from_user+0x380/0x380
[  784.267256]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  784.267270]  ? HARDIRQ_verbose+0x10/0x10
[  784.267278]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  784.267290]  ? __fget+0x1ff/0x360
[  784.267302]  ? lock_acquire+0x170/0x3f0
[  784.267311]  ? lock_downgrade+0x6e0/0x6e0
[  784.267327]  ? __fget+0x226/0x360
[  784.267341]  ? __fget_light+0x199/0x1f0
[  784.267353]  ? sockfd_lookup_light+0xb2/0x160
[  784.267365]  __sys_sendmmsg+0x129/0x330
[  784.267377]  ? SyS_sendmsg+0x40/0x40
[  784.267388]  ? SyS_write+0x1b7/0x210
[  784.267411]  ? __mutex_unlock_slowpath+0x75/0x780
[  784.267429]  ? wait_for_completion_io+0x10/0x10
[  784.267439]  ? vfs_write+0x319/0x4d0
[  784.267450]  ? fput+0xb/0x140
[  784.267460]  ? SyS_write+0x14d/0x210
[  784.267469]  ? SyS_read+0x210/0x210
[  784.365241]  SyS_sendmmsg+0x2f/0x50
[  784.365258]  ? __sys_sendmmsg+0x330/0x330
[  784.373033]  do_syscall_64+0x1d5/0x640
[  784.373051]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  784.373064] RIP: 0033:0x45ca29
[  784.385312] RSP: 002b:00007fb4d23a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  784.385323] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca29
[  784.385329] RDX: ffffffffffffff68 RSI: 0000000020000140 RDI: 0000000000000003
[  784.385334] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
17:48:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:47 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:47 executing program 3 (fault-call:5 fault-nth:1):
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  784.385339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  784.385345] R13: 00000000000008de R14: 00000000004cba28 R15: 00007fb4d23a96d4
17:48:47 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:47 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  784.512342] FAULT_INJECTION: forcing a failure.
[  784.512342] name failslab, interval 1, probability 0, space 0, times 0
[  784.548658] CPU: 0 PID: 12092 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0
[  784.556582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  784.566033] Call Trace:
[  784.568635]  dump_stack+0x1b2/0x283
[  784.572281]  should_fail.cold+0x10a/0x154
[  784.576444]  should_failslab+0xd6/0x130
[  784.580429]  kmem_cache_alloc_node_trace+0x25a/0x400
[  784.585544]  __kmalloc_node_track_caller+0x38/0x70
[  784.590482]  __kmalloc_reserve.isra.0+0x35/0xd0
[  784.595158]  __alloc_skb+0xca/0x4c0
[  784.598791]  ? __kmalloc_reserve.isra.0+0xd0/0xd0
[  784.603639]  ? netlink_autobind.isra.0+0xa9/0x290
[  784.608485]  ? netlink_autobind.isra.0+0x1c5/0x290
[  784.613468]  netlink_sendmsg+0x921/0xbb0
[  784.617536]  ? nlmsg_notify+0x160/0x160
[  784.621513]  ? move_addr_to_kernel.part.0+0xf0/0xf0
[  784.626542]  ? security_socket_sendmsg+0x83/0xb0
[  784.626552]  ? nlmsg_notify+0x160/0x160
[  784.626561]  sock_sendmsg+0xb5/0x100
[  784.626569]  ___sys_sendmsg+0x349/0x840
[  784.626577]  ? trace_hardirqs_on+0x10/0x10
[  784.626585]  ? copy_msghdr_from_user+0x380/0x380
[  784.626591]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  784.626601]  ? HARDIRQ_verbose+0x10/0x10
[  784.626606]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  784.626616]  ? __fget+0x1ff/0x360
[  784.626624]  ? lock_acquire+0x170/0x3f0
[  784.626631]  ? lock_downgrade+0x6e0/0x6e0
[  784.626642]  ? __fget+0x226/0x360
[  784.626651]  ? __fget_light+0x199/0x1f0
[  784.626659]  ? sockfd_lookup_light+0xb2/0x160
[  784.626668]  __sys_sendmmsg+0x129/0x330
[  784.626676]  ? SyS_sendmsg+0x40/0x40
[  784.626684]  ? SyS_write+0x1b7/0x210
[  784.626700]  ? __mutex_unlock_slowpath+0x75/0x780
[  784.626708]  ? wait_for_completion_io+0x10/0x10
[  784.626715]  ? vfs_write+0x319/0x4d0
[  784.626723]  ? fput+0xb/0x140
[  784.626729]  ? SyS_write+0x14d/0x210
[  784.626736]  ? SyS_read+0x210/0x210
[  784.626745]  SyS_sendmmsg+0x2f/0x50
[  784.626751]  ? __sys_sendmmsg+0x330/0x330
[  784.626760]  do_syscall_64+0x1d5/0x640
[  784.626771]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  784.626777] RIP: 0033:0x45ca29
[  784.626781] RSP: 002b:00007fb4d23a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  784.626789] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca29
[  784.626793] RDX: ffffffffffffff68 RSI: 0000000020000140 RDI: 0000000000000003
[  784.626797] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  784.626801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  784.626805] R13: 00000000000008de R14: 00000000004cba28 R15: 00007fb4d23a96d4
17:48:47 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:48:47 executing program 0 (fault-call:4 fault-nth:0):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:47 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:47 executing program 3 (fault-call:5 fault-nth:2):
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:47 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  784.964814] FAULT_INJECTION: forcing a failure.
[  784.964814] name failslab, interval 1, probability 0, space 0, times 0
[  785.003401] FAULT_INJECTION: forcing a failure.
[  785.003401] name failslab, interval 1, probability 0, space 0, times 0
[  785.023684] CPU: 1 PID: 12121 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0
[  785.031607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  785.040997] Call Trace:
[  785.043600]  dump_stack+0x1b2/0x283
[  785.047232]  should_fail.cold+0x10a/0x154
[  785.051386]  should_failslab+0xd6/0x130
[  785.055362]  __kmalloc+0x2c1/0x400
[  785.058898]  ? rw_copy_check_uvector+0x1d4/0x290
[  785.063660]  rw_copy_check_uvector+0x1d4/0x290
[  785.068253]  ? check_preemption_disabled+0x35/0x240
[  785.073274]  import_iovec+0x94/0x360
[  785.076987]  ? dup_iter+0x240/0x240
[  785.080628]  vfs_readv+0xb3/0x130
[  785.084083]  ? compat_rw_copy_check_uvector+0x320/0x320
[  785.089445]  ? __fget+0x1ff/0x360
[  785.092905]  ? lock_acquire+0x170/0x3f0
[  785.096892]  ? lock_downgrade+0x6e0/0x6e0
[  785.101049]  ? __fget+0x226/0x360
[  785.104505]  do_preadv+0x161/0x200
[  785.108041]  ? do_readv+0x2c0/0x2c0
[  785.111668]  ? SyS_clock_settime+0x1a0/0x1a0
[  785.116076]  ? do_syscall_64+0x4c/0x640
[  785.120048]  ? SyS_writev+0x30/0x30
[  785.123672]  do_syscall_64+0x1d5/0x640
[  785.127563]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  785.132760] RIP: 0033:0x45ca29
[  785.135948] RSP: 002b:00007fdb48906c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  785.143793] RAX: ffffffffffffffda RBX: 00000000004fa6c0 RCX: 000000000045ca29
[  785.151072] RDX: 00000000000001a4 RSI: 00000000200017c0 RDI: 0000000000000004
[  785.158346] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  785.165612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
17:48:47 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  785.172878] R13: 0000000000000862 R14: 00000000004cb43c R15: 00007fdb489076d4
[  785.193101] CPU: 0 PID: 12126 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0
[  785.193109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  785.193113] Call Trace:
[  785.193132]  dump_stack+0x1b2/0x283
[  785.193149]  should_fail.cold+0x10a/0x154
[  785.193160]  ? lock_downgrade+0x6e0/0x6e0
[  785.193174]  should_failslab+0xd6/0x130
[  785.193189]  kmem_cache_alloc+0x40/0x3c0
[  785.233721]  skb_clone+0x126/0x320
[  785.233739]  netlink_deliver_tap+0x65b/0x860
[  785.241705]  netlink_unicast+0x485/0x610
[  785.241718]  ? netlink_sendskb+0x50/0x50
[  785.241731]  netlink_sendmsg+0x64a/0xbb0
[  785.241745]  ? nlmsg_notify+0x160/0x160
[  785.241753]  ? move_addr_to_kernel.part.0+0xf0/0xf0
[  785.241768]  ? security_socket_sendmsg+0x83/0xb0
[  785.267642]  ? nlmsg_notify+0x160/0x160
[  785.267653]  sock_sendmsg+0xb5/0x100
[  785.267665]  ___sys_sendmsg+0x349/0x840
[  785.280094]  ? trace_hardirqs_on+0x10/0x10
[  785.280108]  ? copy_msghdr_from_user+0x380/0x380
[  785.280117]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  785.280132]  ? HARDIRQ_verbose+0x10/0x10
[  785.280140]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  785.280153]  ? __fget+0x1ff/0x360
[  785.280167]  ? lock_acquire+0x170/0x3f0
[  785.280176]  ? lock_downgrade+0x6e0/0x6e0
[  785.280193]  ? __fget+0x226/0x360
[  785.280207]  ? __fget_light+0x199/0x1f0
17:48:48 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  785.280219]  ? sockfd_lookup_light+0xb2/0x160
[  785.280231]  __sys_sendmmsg+0x129/0x330
[  785.280244]  ? SyS_sendmsg+0x40/0x40
[  785.280253]  ? SyS_write+0x1b7/0x210
[  785.280277]  ? __mutex_unlock_slowpath+0x75/0x780
[  785.280289]  ? wait_for_completion_io+0x10/0x10
[  785.280298]  ? vfs_write+0x319/0x4d0
[  785.352333]  ? fput+0xb/0x140
[  785.352342]  ? SyS_write+0x14d/0x210
[  785.352350]  ? SyS_read+0x210/0x210
[  785.352364]  SyS_sendmmsg+0x2f/0x50
[  785.366415]  ? __sys_sendmmsg+0x330/0x330
[  785.366429]  do_syscall_64+0x1d5/0x640
[  785.366445]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  785.366455] RIP: 0033:0x45ca29
[  785.366460] RSP: 002b:00007fb4d23a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  785.366472] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca29
[  785.366478] RDX: ffffffffffffff68 RSI: 0000000020000140 RDI: 0000000000000003
[  785.366482] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  785.366489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
17:48:48 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:48 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  785.421027] R13: 00000000000008de R14: 00000000004cba28 R15: 00007fb4d23a96d4
17:48:48 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:48:48 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:48 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f0000000000), 0x0, 0x0)

17:48:48 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:48 executing program 2 (fault-call:7 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:48 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:48 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:48 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:48 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05aa4f5089d6aefe280010000000140001"], 0x28}}, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000)
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000002c0)="a1a7fb67", {0x5, 0xf27, 0x56544943, 0x6, 0x5, 0x7, 0x3, 0x7fff}})
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  786.196940] FAULT_INJECTION: forcing a failure.
[  786.196940] name failslab, interval 1, probability 0, space 0, times 0
[  786.219226] CPU: 0 PID: 12197 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  786.221621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  786.227144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  786.227150] Call Trace:
[  786.227171]  dump_stack+0x1b2/0x283
[  786.227190]  should_fail.cold+0x10a/0x154
[  786.227207]  should_failslab+0xd6/0x130
[  786.227224]  kmem_cache_alloc+0x28e/0x3c0
[  786.263781]  mmu_topup_memory_caches+0x83/0x300
[  786.268470]  kvm_mmu_load+0x1e/0xc90
[  786.273156]  ? kvm_apic_accept_events+0x16f/0x3f0
[  786.273167]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  786.273183]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  786.273194]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.273226]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  786.273235]  ? lock_acquire+0x170/0x3f0
[  786.273244]  ? lock_downgrade+0x6e0/0x6e0
[  786.273262]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  786.273271]  kvm_vcpu_ioctl+0x3df/0xc70
[  786.273283]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.273297]  ? trace_hardirqs_on+0x10/0x10
[  786.273307]  ? check_preemption_disabled+0x35/0x240
[  786.273318]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.273330]  ? proc_tid_io_accounting+0x20/0x20
[  786.273342]  ? HARDIRQ_verbose+0x10/0x10
[  786.273353]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.273367]  do_vfs_ioctl+0x75a/0xfe0
[  786.273381]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  786.358478]  ? ioctl_preallocate+0x1a0/0x1a0
[  786.358502]  ? security_file_ioctl+0x76/0xb0
[  786.358510]  ? security_file_ioctl+0x83/0xb0
[  786.358523]  SyS_ioctl+0x7f/0xb0
[  786.375113]  ? do_vfs_ioctl+0xfe0/0xfe0
[  786.375126]  do_syscall_64+0x1d5/0x640
[  786.375143]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  786.375155] RIP: 0033:0x45ca29
17:48:49 executing program 2 (fault-call:7 fault-nth:1):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:49 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:49 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

17:48:49 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  786.391331] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.391343] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  786.391348] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  786.391352] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  786.391356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  786.391361] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
[  786.503686] FAULT_INJECTION: forcing a failure.
[  786.503686] name failslab, interval 1, probability 0, space 0, times 0
[  786.515577] CPU: 0 PID: 12219 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  786.523654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  786.533203] Call Trace:
[  786.535838]  dump_stack+0x1b2/0x283
[  786.539589]  should_fail.cold+0x10a/0x154
[  786.544050]  should_failslab+0xd6/0x130
[  786.548018]  kmem_cache_alloc+0x28e/0x3c0
[  786.552179]  mmu_topup_memory_caches+0x83/0x300
[  786.556850]  kvm_mmu_load+0x1e/0xc90
[  786.560552]  ? kvm_apic_accept_events+0x16f/0x3f0
[  786.565404]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  786.570172]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  786.575105]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.580172]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  786.585034]  ? lock_acquire+0x170/0x3f0
[  786.585044]  ? lock_downgrade+0x6e0/0x6e0
[  786.585061]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  786.585070]  kvm_vcpu_ioctl+0x3df/0xc70
[  786.585083]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.585096]  ? trace_hardirqs_on+0x10/0x10
[  786.585106]  ? check_preemption_disabled+0x35/0x240
[  786.585118]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.585129]  ? proc_tid_io_accounting+0x20/0x20
[  786.585142]  ? HARDIRQ_verbose+0x10/0x10
[  786.585153]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.585166]  do_vfs_ioctl+0x75a/0xfe0
[  786.585179]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  786.585192]  ? ioctl_preallocate+0x1a0/0x1a0
[  786.585213]  ? security_file_ioctl+0x76/0xb0
[  786.585223]  ? security_file_ioctl+0x83/0xb0
[  786.585234]  SyS_ioctl+0x7f/0xb0
[  786.585242]  ? do_vfs_ioctl+0xfe0/0xfe0
[  786.585254]  do_syscall_64+0x1d5/0x640
[  786.585271]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  786.675082] RIP: 0033:0x45ca29
[  786.675088] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.675097] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  786.675106] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
17:48:49 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  786.700628] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  786.700634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  786.700639] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:49 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

17:48:49 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:49 executing program 2 (fault-call:7 fault-nth:2):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:49 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x80000001, 0x4, 0x49, &(0x7f0000ffc000/0x2000)=nil, 0x101})
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/33)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000100)=""/194)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  786.826299] FAULT_INJECTION: forcing a failure.
[  786.826299] name failslab, interval 1, probability 0, space 0, times 0
[  786.839957] CPU: 0 PID: 12244 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  786.847868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  786.857233] Call Trace:
[  786.859844]  dump_stack+0x1b2/0x283
[  786.863490]  should_fail.cold+0x10a/0x154
[  786.867664]  should_failslab+0xd6/0x130
[  786.871638]  kmem_cache_alloc+0x28e/0x3c0
17:48:49 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  786.875798]  mmu_topup_memory_caches+0x83/0x300
[  786.880483]  kvm_mmu_load+0x1e/0xc90
[  786.884200]  ? kvm_apic_accept_events+0x16f/0x3f0
[  786.889057]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  786.893802]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  786.898730]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.903683]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  786.908538]  ? lock_acquire+0x170/0x3f0
[  786.908549]  ? lock_downgrade+0x6e0/0x6e0
[  786.908567]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  786.908577]  kvm_vcpu_ioctl+0x3df/0xc70
17:48:49 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

[  786.908589]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.908602]  ? trace_hardirqs_on+0x10/0x10
[  786.908612]  ? check_preemption_disabled+0x35/0x240
[  786.908624]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  786.908634]  ? proc_tid_io_accounting+0x20/0x20
[  786.908647]  ? HARDIRQ_verbose+0x10/0x10
[  786.908657]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  786.908668]  do_vfs_ioctl+0x75a/0xfe0
[  786.908680]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  786.908692]  ? ioctl_preallocate+0x1a0/0x1a0
[  786.908714]  ? security_file_ioctl+0x76/0xb0
[  786.908732]  ? security_file_ioctl+0x83/0xb0
[  786.908744]  SyS_ioctl+0x7f/0xb0
[  786.908753]  ? do_vfs_ioctl+0xfe0/0xfe0
[  786.908766]  do_syscall_64+0x1d5/0x640
[  786.908782]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  786.908790] RIP: 0033:0x45ca29
[  786.908795] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.908807] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  786.908812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
17:48:49 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000200)={@fixed={[], 0x11}, 0x3})
preadv(r3, &(0x7f0000000200), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x20000003)
accept4(r4, 0x0, 0x0, 0x0)
r5 = dup2(r4, 0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x74, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/116}, &(0x7f0000000080)=0x78)

17:48:49 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  786.908818] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  786.908823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  786.908828] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:49 executing program 2 (fault-call:7 fault-nth:3):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:49 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
write$sndseq(r3, &(0x7f0000000140)=[{0x7f, 0x3, 0x80, 0x3, @tick=0x7682, {0x1, 0x6}, {0x2, 0x2}, @ext={0x40, &(0x7f00000000c0)="7cf74d4cb27defc67592fb826c9d4f193740d67c2959d9fd5cb495ab782dc0b9d23392fc922239b78f4b3763accfd5ee1f4a42875c32ec8c514b2ac7fad85355"}}], 0x1c)
r4 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:49 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:49 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  787.175765] FAULT_INJECTION: forcing a failure.
[  787.175765] name failslab, interval 1, probability 0, space 0, times 0
[  787.209610] CPU: 1 PID: 12280 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  787.217532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  787.226982] Call Trace:
[  787.229582]  dump_stack+0x1b2/0x283
[  787.233224]  should_fail.cold+0x10a/0x154
[  787.237378]  should_failslab+0xd6/0x130
[  787.241361]  kmem_cache_alloc+0x28e/0x3c0
[  787.245513]  mmu_topup_memory_caches+0x83/0x300
[  787.250196]  kvm_mmu_load+0x1e/0xc90
[  787.253912]  ? kvm_apic_accept_events+0x16f/0x3f0
[  787.258757]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  787.263519]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  787.268450]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  787.273398]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  787.278324]  ? lock_acquire+0x170/0x3f0
[  787.282298]  ? lock_downgrade+0x6e0/0x6e0
[  787.286465]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  787.290614]  kvm_vcpu_ioctl+0x3df/0xc70
[  787.294591]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  787.300480]  ? trace_hardirqs_on+0x10/0x10
[  787.304713]  ? check_preemption_disabled+0x35/0x240
[  787.309743]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  787.314672]  ? proc_tid_io_accounting+0x20/0x20
[  787.319346]  ? HARDIRQ_verbose+0x10/0x10
[  787.323411]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  787.329300]  do_vfs_ioctl+0x75a/0xfe0
[  787.333105]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  787.338733]  ? ioctl_preallocate+0x1a0/0x1a0
[  787.343154]  ? security_file_ioctl+0x76/0xb0
[  787.347568]  ? security_file_ioctl+0x83/0xb0
[  787.351976]  SyS_ioctl+0x7f/0xb0
[  787.355338]  ? do_vfs_ioctl+0xfe0/0xfe0
[  787.359313]  do_syscall_64+0x1d5/0x640
[  787.363230]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  787.368413] RIP: 0033:0x45ca29
17:48:50 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  787.371595] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  787.379304] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  787.386572] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  787.393837] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  787.401101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  787.408369] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:50 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:50 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:50 executing program 2 (fault-call:7 fault-nth:4):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:50 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:50 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003140), 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:50 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  787.619236] FAULT_INJECTION: forcing a failure.
[  787.619236] name failslab, interval 1, probability 0, space 0, times 0
17:48:50 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  787.686766] CPU: 1 PID: 12309 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  787.694731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  787.704161] Call Trace:
[  787.706761]  dump_stack+0x1b2/0x283
[  787.710400]  should_fail.cold+0x10a/0x154
[  787.714568]  should_failslab+0xd6/0x130
[  787.718552]  kmem_cache_alloc+0x28e/0x3c0
[  787.722711]  mmu_topup_memory_caches+0x83/0x300
[  787.727395]  kvm_mmu_load+0x1e/0xc90
[  787.731110]  ? kvm_apic_accept_events+0x16f/0x3f0
[  787.735954]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  787.740718]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  787.745651]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  787.750597]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  787.755437]  ? lock_acquire+0x170/0x3f0
[  787.759413]  ? lock_downgrade+0x6e0/0x6e0
[  787.763570]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  787.767716]  kvm_vcpu_ioctl+0x3df/0xc70
[  787.771794]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  787.777772]  ? trace_hardirqs_on+0x10/0x10
[  787.782018]  ? check_preemption_disabled+0x35/0x240
[  787.787037]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  787.791969]  ? proc_tid_io_accounting+0x20/0x20
[  787.796645]  ? HARDIRQ_verbose+0x10/0x10
[  787.800707]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  787.806598]  do_vfs_ioctl+0x75a/0xfe0
[  787.810416]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  787.816045]  ? ioctl_preallocate+0x1a0/0x1a0
[  787.820464]  ? security_file_ioctl+0x76/0xb0
[  787.824871]  ? security_file_ioctl+0x83/0xb0
[  787.829281]  SyS_ioctl+0x7f/0xb0
[  787.832647]  ? do_vfs_ioctl+0xfe0/0xfe0
[  787.836622]  do_syscall_64+0x1d5/0x640
[  787.840517]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  787.845728] RIP: 0033:0x45ca29
[  787.848914] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  787.856621] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  787.863889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  787.871158] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  787.878548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
17:48:50 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$inet6(0xa, 0x80000, 0x2)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0x0)
write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x1a, {0x14, 0x7, 0x1, 0x0, 0x2, 0x8, 0xfffffffffffffff7, 0xffffffff, 0x4}}, 0x43)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
r3 = accept4(r1, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
fsetxattr$security_selinux(r3, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  787.885815] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:50 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:50 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:50 executing program 2 (fault-call:7 fault-nth:5):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:50 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:50 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  788.058229] FAULT_INJECTION: forcing a failure.
[  788.058229] name failslab, interval 1, probability 0, space 0, times 0
[  788.105089] CPU: 1 PID: 12342 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  788.113012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  788.122460] Call Trace:
[  788.125098]  dump_stack+0x1b2/0x283
[  788.128736]  should_fail.cold+0x10a/0x154
[  788.132982]  should_failslab+0xd6/0x130
[  788.136961]  kmem_cache_alloc+0x28e/0x3c0
[  788.141116]  mmu_topup_memory_caches+0x83/0x300
[  788.146480]  kvm_mmu_load+0x1e/0xc90
[  788.150190]  ? kvm_apic_accept_events+0x16f/0x3f0
[  788.155039]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  788.159807]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  788.164750]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.164776]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  788.164784]  ? lock_acquire+0x170/0x3f0
[  788.164794]  ? lock_downgrade+0x6e0/0x6e0
[  788.164812]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  788.164821]  kvm_vcpu_ioctl+0x3df/0xc70
[  788.164835]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.164848]  ? trace_hardirqs_on+0x10/0x10
[  788.164858]  ? check_preemption_disabled+0x35/0x240
[  788.164871]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.164881]  ? proc_tid_io_accounting+0x20/0x20
[  788.164894]  ? HARDIRQ_verbose+0x10/0x10
[  788.164906]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.164917]  do_vfs_ioctl+0x75a/0xfe0
[  788.164930]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  788.164943]  ? ioctl_preallocate+0x1a0/0x1a0
[  788.164963]  ? security_file_ioctl+0x76/0xb0
[  788.243748]  ? security_file_ioctl+0x83/0xb0
[  788.243760]  SyS_ioctl+0x7f/0xb0
[  788.243772]  ? do_vfs_ioctl+0xfe0/0xfe0
[  788.255509]  do_syscall_64+0x1d5/0x640
[  788.255527]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  788.255535] RIP: 0033:0x45ca29
[  788.255541] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  788.255552] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  788.255558] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  788.255563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
17:48:50 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:51 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:51 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x92002, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c0000000206ffff0000000000000000000000000e0003006269746d61703a697000000005000400000000003c00078008000b400000000708000640ffff00001800018014000240fc000000000000000000000000000015001f0000002400078008000840000000001800018014000240fe88000000000000000000000000010105000500020000000500040002000000"], 0x9c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x400080)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f00000000c0)={0x6, 0x8})

[  788.255568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  788.255574] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:51 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

17:48:51 executing program 2 (fault-call:7 fault-nth:6):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:51 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "3ca355dda54eb80217a9452fc0c0f62e"}, 0x11, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:51 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:51 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0x10001, 0x4)
listen(r0, 0x20000003)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250b00000020000680040002000400020008000100000200000800010004000000040002001c0004800c00078008000300040000000900010073797a3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x24040050)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

[  788.455452] FAULT_INJECTION: forcing a failure.
[  788.455452] name failslab, interval 1, probability 0, space 0, times 0
[  788.470916] CPU: 0 PID: 12383 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  788.478836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  788.488192] Call Trace:
[  788.490813]  dump_stack+0x1b2/0x283
[  788.494454]  should_fail.cold+0x10a/0x154
[  788.498611]  should_failslab+0xd6/0x130
17:48:51 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  788.502591]  kmem_cache_alloc+0x28e/0x3c0
[  788.506748]  mmu_topup_memory_caches+0x83/0x300
[  788.511426]  kvm_mmu_load+0x1e/0xc90
[  788.515144]  ? kvm_apic_accept_events+0x16f/0x3f0
[  788.519990]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  788.524755]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  788.529686]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.534634]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  788.539474]  ? lock_acquire+0x170/0x3f0
[  788.543451]  ? lock_downgrade+0x6e0/0x6e0
17:48:51 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020600000000000000000000000e0003006269746d61703a697000000005000400000000000600020073797a30000000002400078008000840000000001800018014000240fe88000000000000000000000000000105000500020000000500010006000000"], 0x6c}}, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffff9, 0x4)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x8000)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  788.548404]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  788.548414]  kvm_vcpu_ioctl+0x3df/0xc70
[  788.548427]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.548441]  ? trace_hardirqs_on+0x10/0x10
[  788.548451]  ? check_preemption_disabled+0x35/0x240
[  788.548463]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.548474]  ? proc_tid_io_accounting+0x20/0x20
[  788.548488]  ? HARDIRQ_verbose+0x10/0x10
[  788.548498]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.548512]  do_vfs_ioctl+0x75a/0xfe0
[  788.548525]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  788.548537]  ? ioctl_preallocate+0x1a0/0x1a0
[  788.548566]  ? security_file_ioctl+0x76/0xb0
[  788.548575]  ? security_file_ioctl+0x83/0xb0
[  788.548586]  SyS_ioctl+0x7f/0xb0
[  788.548595]  ? do_vfs_ioctl+0xfe0/0xfe0
[  788.548608]  do_syscall_64+0x1d5/0x640
[  788.548626]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  788.548635] RIP: 0033:0x45ca29
[  788.548640] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  788.548651] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  788.548656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  788.548662] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  788.548667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  788.548673] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:51 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:51 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:51 executing program 2 (fault-call:7 fault-nth:7):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:51 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:51 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)

[  788.876656] FAULT_INJECTION: forcing a failure.
[  788.876656] name failslab, interval 1, probability 0, space 0, times 0
[  788.912375] CPU: 1 PID: 12419 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  788.920299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  788.929655] Call Trace:
[  788.932251]  dump_stack+0x1b2/0x283
[  788.935890]  should_fail.cold+0x10a/0x154
[  788.940048]  should_failslab+0xd6/0x130
[  788.944021]  kmem_cache_alloc+0x28e/0x3c0
[  788.948194]  mmu_topup_memory_caches+0x83/0x300
[  788.952877]  kvm_mmu_load+0x1e/0xc90
[  788.956588]  ? kvm_apic_accept_events+0x16f/0x3f0
[  788.961427]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  788.966189]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  788.971141]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.976084]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  788.980938]  ? lock_acquire+0x170/0x3f0
[  788.985002]  ? lock_downgrade+0x6e0/0x6e0
[  788.989180]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  788.989189]  kvm_vcpu_ioctl+0x3df/0xc70
[  788.989203]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.989217]  ? trace_hardirqs_on+0x10/0x10
[  788.989227]  ? check_preemption_disabled+0x35/0x240
[  788.989239]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  788.989250]  ? proc_tid_io_accounting+0x20/0x20
[  788.989263]  ? HARDIRQ_verbose+0x10/0x10
[  788.989274]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  788.989287]  do_vfs_ioctl+0x75a/0xfe0
[  788.989300]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  788.989313]  ? ioctl_preallocate+0x1a0/0x1a0
[  788.989335]  ? security_file_ioctl+0x76/0xb0
[  788.989345]  ? security_file_ioctl+0x83/0xb0
[  788.989355]  SyS_ioctl+0x7f/0xb0
[  788.989364]  ? do_vfs_ioctl+0xfe0/0xfe0
[  788.989377]  do_syscall_64+0x1d5/0x640
[  788.989395]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  789.073118] RIP: 0033:0x45ca29
17:48:51 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:51 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

[  789.073123] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  789.073132] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  789.073137] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  789.073146] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  789.109492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  789.109497] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:51 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:51 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

17:48:51 executing program 2 (fault-call:7 fault-nth:8):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:52 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r2, 0x0, 0x800000080004103)

[  789.521968] FAULT_INJECTION: forcing a failure.
[  789.521968] name failslab, interval 1, probability 0, space 0, times 0
[  789.534183] CPU: 1 PID: 12460 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  789.542075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  789.554293] Call Trace:
[  789.556889]  dump_stack+0x1b2/0x283
[  789.560528]  should_fail.cold+0x10a/0x154
[  789.564680]  should_failslab+0xd6/0x130
[  789.568651]  kmem_cache_alloc+0x28e/0x3c0
[  789.572798]  mmu_topup_memory_caches+0x83/0x300
[  789.577469]  kvm_mmu_load+0x1e/0xc90
[  789.581178]  ? kvm_apic_accept_events+0x16f/0x3f0
[  789.586012]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  789.590764]  ? kvm_arch_vcpu_ioctl_run+0x2a25/0x58f0
[  789.595850]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  789.600784]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  789.605613]  ? lock_acquire+0x170/0x3f0
[  789.609573]  ? lock_downgrade+0x6e0/0x6e0
[  789.613709]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  789.617838]  kvm_vcpu_ioctl+0x3df/0xc70
[  789.621803]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  789.627685]  ? trace_hardirqs_on+0x10/0x10
[  789.631917]  ? check_preemption_disabled+0x35/0x240
[  789.636965]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  789.641892]  ? proc_tid_io_accounting+0x20/0x20
[  789.646554]  ? HARDIRQ_verbose+0x10/0x10
[  789.650786]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  789.656687]  do_vfs_ioctl+0x75a/0xfe0
[  789.660479]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  789.666100]  ? ioctl_preallocate+0x1a0/0x1a0
[  789.671719]  ? security_file_ioctl+0x76/0xb0
[  789.676137]  ? security_file_ioctl+0x83/0xb0
[  789.680538]  SyS_ioctl+0x7f/0xb0
[  789.683902]  ? do_vfs_ioctl+0xfe0/0xfe0
[  789.687896]  do_syscall_64+0x1d5/0x640
[  789.691772]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  789.696943] RIP: 0033:0x45ca29
[  789.700123] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  789.707833] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  789.715098] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  789.722358] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  789.729632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  789.736902] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:52 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:52 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:52 executing program 2 (fault-call:7 fault-nth:9):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:52 executing program 3:
r0 = socket(0x22, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0))
r1 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002400130f00004007a2a300050000000088d396b6bcb0284ef2f269ecd8376883f61948b8c0b6949a7432f20c095dbd056af39eaa5df228304ab430427c3aa1b068d64c434cb882ceb134fb10828fc22846a55826f41404", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtfilter={0x221c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x21ec, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x10}}, @TCA_BASIC_EMATCHES={0x9d8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x120, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x1ff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x29}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x76}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xf2, 0x5, "3eb7e6f9e24074705b97a10d1998b5b2ee09916337cf0e1b13d4086d7c6ca373d897b448467d9f03c8f6498763eff71874cc0d2a2c04f4300482fe35e261af6a34a25b7deb7723af00c02ec3f4eb624ee9ec3c7e2256871a2e33bcfc3f57c4c9ce58cdfdf7aab43b59646875299501a7ee48626a5cde6804352cc28c9ca5f9628b55566ca65a5fb8e01603eabd97f03e165b366ea249acb1ca7ded6dd5b5cf6ba981300964d7f2cd4a6960cc34c1eed28f7f352924c07fda9e45c367eb68dff921316160ef6063d4471688fb0dd6220f30ecc87c8f87d4eea6a41e92b2c93c87c220352cf46194e47e53059625ce"}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x4, 0x1}, {0x3, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7734, 0x8, 0x3}, {0x2, 0x4, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x8}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0xfffd}, {0x9, 0x1, 0x9, 0x2, 0x2, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8000}, {0x5, 0x5, 0x1, 0x3eb}}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x1000}, {0xffffffff, 0x6, 0x1, "f575409e67c0"}}}, @TCF_EM_IPT={0x44, 0x2, 0x0, 0x0, {{0xff, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x18, 0x5, "8571326046d0287d3ddc2f17f45dac143218d915"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x380, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x7}, {0x8, 0x7ff, 0x6cb2, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x106}, {0xffffffffffffffff, 0x2, 0x3f710337850c6897}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0xffff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0xb6}, {0x7fff, 0x36, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="eda8e857a59e", @TCF_META_TYPE_VAR="1884708b2f3cf98be1", @TCF_META_TYPE_VAR="7127e6", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='*', @TCF_META_TYPE_VAR="9396f381d839", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="d103", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x7}, {0x10000, 0x1, 0x6, 0x9}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x9}, {0x1, 0x3, 0x5}}}, @TCF_EM_IPT={0x108, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x40}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xd5, 0x5, "43f6a06ab5df209b6223091b09ac10c811819082817dc325e8145bf3e0ae26038902ca7afd3959353a0cd10a9c82e085db96a85a61606e462e2ae1658442d9602db41106d0de98a905da30beb74515184ce18852fbbe6a8ef99ee70496aa57b3fc7e70f169187b024b50262abd1f94ada770262106fa3d4a8cfc4f6a7811ecd50f7370005da972fa465e56f592f938ffd808a49a02a3e62a30cff1f8fb0a850ac602e594208014d9e256515618dd58dfc009449229edf19f97faa30a07b98b1284cfeec8e6d567c428ab1f4aa8a573a73d"}]}}, @TCF_EM_IPT={0xec, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0xc4, 0x5, "05415a9f3942c87320680ba5bb9ba3598bd12f8f3b5c81f2dc0aa74fc3c39a6b353bfd008d3ec3cc15f46bba69dfd5b32bdd2bc16307f5ba8cb6f8b49f0a31f6e9bb2bde357b2fc520ed9ae5c951a679d99f25ad4dfb969ef789e46f06fcd36bce8d0dbc83c9dbcb2163a889b57dac69f923cffd64c7dcbd9759f9a99b5177fee478324c6040928456a7efd30d1c908f3149968c9682568fc7cbbf58db0397a481c0f5a84ee660f079e68ab91a99e074ff87bdbec83001eeb551526987110f86"}, @TCA_EM_IPT_MATCH_DATA={0xb, 0x5, "e3ffc5705bfd67"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1f}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CONTAINER={0xd8, 0x3, 0x0, 0x0, {{0xd2, 0x0, 0x448}, "cebff0c2721e1edb566f57dff1c852c940612291877b3586074869710e5aed92d44c87cd505fb47e2cb8e367f16cd2f6e65e6705e7c53da860dd7bd92685cefbf5b2d8e4bcf9e2673d302bfd40651b82ad6915a41ec49df351bf389d77a802c186fb655eaedf5ae6ebbb9b1f2473b8fa90ce5d374212816a6f8dc6bf7b36d743c92417a0b68503d0e0c675486c4019d6bcce8466d2f2c5275850ea425dff53e148094728619acdcb76127118ffea292c2e9e0a2d79090603ce097c9b72f64ac5226220741032b6cdd2"}}]}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xac, 0x1, 0x0, 0x0, {{0x1f, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_DATA={0x84, 0x5, "2ca7b7cd7b4d5355481174fecd83057aadcc5c249f4d6337be700b046cda6fb607d4bbc10cdf6cb0f8efc0b36a1a2861603559c586e8d2dd1a4478e3dd9313dee60972b5a083db8373e482715b666e0a3f3db255ba53a75daa861224326de21c081ab54c0f402922840bcea226c9fdee98d3a3f8720a767d0590d5a9601e3d2c"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x81, 0x0, 0x0, {{0xfff, 0x7, 0x1db0}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x400, 0x7, 0x9}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x7}, {0x7fc0, 0xd364, 0x9, 0x5, 0x8, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x35c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x86, 0x7, 0xfffa}, {{0x2, 0x1, 0x1}, {0x3}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x1000}, {0x56, 0x8ec, 0x80000001, 0x7ff}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x40}, {0x6, 0x6, 0xffffff7f, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x3ff}, {0x81, 0x7, 0x2, "21a9c56a453986"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x200}, {0xc15, 0xa, 0x0, "217ed9f221ee97264dbe"}}}, @TCF_EM_IPT={0x10c, 0x2, 0x0, 0x0, {{0x7f, 0x9, 0x18}, [@TCA_EM_IPT_MATCH_DATA={0xf0, 0x5, "f74f177bf072b7d542155c69350a667db38ae69a70828908d8d4fae807e96380a1a03d4b541d19661c187af4e4f2c50c9008ba378987f6fbd886614a840c097be0b805e94d7482abeb377e82fb8d43797928d38659cd8e1b4f532fdc8eace985c902dd6fa06723ebc860157f5c2aad03ec402fd80b0d8842d2cee2ddaf4709f474428cfb9dcf40b2d059d03398ff6934a0e12dd02026c512f25e0d59bf3638cb37d7b8424b9131be29a9c4cf8ffef3e999b5c780176887c2bc9f1ef39c48547aad922b0af042f895b7af825fd6be492a1917ba5553f44cec7927b4e31a748a96211fa2773f7bcd2aaff4056f"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3f}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}]}}, @TCF_EM_IPT={0x1c8, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_DATA={0x52, 0x5, "7abedfb310ccc4d6bf732e3a5774803338b8bef606ea99f4c1c9f00ae8f21d1f14c633c337fc6ebc5a156964468d03e8921933716c129e06bae96068b5a262cd40efdeae182ffd8e6d28abec3fc3"}, @TCA_EM_IPT_MATCH_DATA={0x86, 0x5, "b043088345db4a94028c32c1ec80dbecea0ea4a33c59209e34650b21e67b5a095edcbb18fad13cb6694a9fa922bb53ac2b96b0346da9e831c9bd2a48e7b251fe62885a900d2d8b379c97bb1b3f7adb487f090b7a15f38e4fa989f96c3800d05c0e978279964e6ebcecde2d3e3625e8feef317a4031663237a3fc9ff0665f06d4029f"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xcf, 0x5, "ee01e762a16a718ec07a6845f4f0618dcf233fe041903d8e46197b1c1c14f9ebbd10509c3db8a531bb5bfc0c31e720449cbf47be700835c1c7f4d3c92bffd35a633e34253195af2f4b86384b87213988a35f51c72399ee209c85a02b6cea718e765db547d8422fbacf3adac245c4535cdcfdd594e82b8e414bc3bace63418fda13930b718de467cac7a98d89cea249209c89a3e2099d83d8058f9e539ecad2b99ece86b1683c32f4988ea30e110b1d921d40c744ddff014ec88a68193a14796e659df8efc2e53cf44c9775"}]}}]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4a96, 0x0, 0x80, 0x8, 0x6, 0x1, 0x7, 0x5, 0x5, 0xffffff61, 0x5, 0x9, 0x0, 0x0, 0x8, 0x4, 0x1ff, 0x1, 0x1, 0xfff, 0x1, 0xffffffff, 0x7, 0x4, 0x9, 0x6, 0x17, 0x2, 0xfffffffc, 0xefde, 0x6, 0x9, 0x9, 0x3, 0xffff, 0x1, 0xd121, 0x40, 0x5, 0x8001, 0x800, 0x20, 0x292, 0x4, 0xfffffff9, 0x314, 0x8, 0x3, 0x10000, 0x2, 0x5, 0x0, 0x2, 0x7fff, 0x8, 0x80000001, 0x8, 0xb384, 0x200, 0xfffffe00, 0x1, 0x5, 0x4, 0x8, 0x2, 0x14867571, 0x101, 0x9, 0x5, 0x3, 0x7fff, 0x401, 0x9, 0xfffffff9, 0xfff, 0x1, 0x0, 0xf5, 0x6, 0x1, 0xf4, 0x990, 0x7ff, 0x8, 0x0, 0x6, 0x6, 0x1, 0x0, 0x20, 0x1, 0x0, 0x4, 0x8, 0xfffffffd, 0xffff, 0x0, 0x1, 0xec9c, 0x3, 0x9, 0x0, 0x9bd1, 0x176, 0x6e68177b, 0x7, 0x200, 0x6, 0x9, 0x3, 0x81, 0xb48d, 0x7, 0x7ff, 0xff, 0x5, 0x4, 0x8, 0x261b, 0x80000001, 0x38, 0x9, 0x9, 0x9, 0xc8b, 0x1a02, 0x1, 0x3, 0x8, 0x100, 0x5, 0x9, 0x6, 0x701cc1a0, 0x200, 0x0, 0x1, 0x401, 0x7, 0x80, 0x2, 0xfff, 0x7, 0x0, 0x6, 0x400, 0xba54, 0x3ff, 0x40, 0x0, 0x0, 0x7bb, 0x7fff, 0x3, 0x861, 0x7fffffff, 0x10001, 0x959, 0x300000, 0x5, 0x1, 0x9, 0x9, 0x1, 0x3ff, 0x100000, 0x0, 0x0, 0x1, 0xfffffffd, 0x9, 0x7, 0x8, 0x0, 0x101, 0x1ff, 0x8, 0xffff, 0x8, 0x10001, 0x9, 0x7fffffff, 0x4, 0x8, 0x800, 0x0, 0xa0, 0xe0, 0x4, 0xe393, 0x9a1c, 0x0, 0x2c0, 0x0, 0x9, 0x19c3, 0x2, 0x6, 0xfffffffc, 0x5, 0x7, 0xd7, 0x8, 0x1000000, 0x41d7, 0x80000000, 0x48, 0xc, 0x43, 0xffff1b15, 0x1, 0x0, 0x5328, 0x2463, 0x7, 0x9, 0x8, 0x1, 0x3f, 0x0, 0x3, 0x7, 0x4, 0x6, 0x7ff, 0x3, 0x31, 0x0, 0x6, 0xffffb3e1, 0x6, 0x6, 0x6, 0x5, 0x2, 0x8, 0x144, 0x3, 0x0, 0x1ff, 0x7f, 0xdf, 0xc3de, 0x7ff, 0xaf, 0x7fffffff, 0x4, 0x3, 0xff, 0x8, 0x9, 0x2, 0x5, 0x4, 0x2]}]}, @TCA_BASIC_ACT={0x2e0, 0x3, [@m_ife={0xfc, 0x7, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffe1, 0x10000, 0x7, 0xffff, 0xfffffff9}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x100}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x1, 0x3, 0x3, 0x8}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfc00}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x3f, 0x6, "d8ae5782ca6c27de43276e2a926347014ccf6fb6815438a0ec4a11db3f5164a0aca90f74c44f9f0608395bba1360517b426f7485593574b1a5345a"}}}, @m_gact={0xb8, 0x9, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x2, 0x8, 0xfffffffe, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3b6, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0xffffffffffffffff, 0xe4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x217f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x169f, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16f3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1718, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9a9f, 0x100, 0x10000000, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1f, 0x1, 0x10000000, 0x8, 0x7fffffff}}]}, {0x5, 0x6, "b0"}}}, @m_ct={0x128, 0x19, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "10e04d1a3869408587bc2c8c16f43ab5"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS={0x14, 0x7, "e2c67412feabd5f9562f78dd45f62b4d"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xb2, 0x6, "67d66d2ac749facb596b8ffbbf74c44f2d70751d40f0f0b11463753bda742f1c42c31fd789e2ab4e152d2042ca2a3bcb95ea5d830631500176b048798ea517eb7b827e8e6343ab5d53244204c9461c6c445f3dcf092f6a19b0828333b219083f291d276e1dc6cf60eb493f1aaae4b975f88053ef70a8b7bf72849112cfb35a087a839213f718f6f69cc2bfb44c845f68d81261a92ab2c5f7b4ce931d89e5ee9a32fbe2774a1955c405ad2bb1840b"}}}]}, @TCA_BASIC_POLICE={0x874, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x64}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x2, 0x3, 0x81, 0xffff, 0x1, 0x4, 0xf114, 0x7ff, 0x1, 0x6, 0x5, 0x9, 0xbf, 0x401, 0x7, 0x8, 0x6, 0xc74, 0x0, 0x6a2, 0x1, 0x7, 0x1, 0x3, 0x5, 0x2, 0x2f5, 0x5, 0x5, 0x2, 0x7d, 0x45cb, 0x4, 0x2, 0x2, 0x5, 0x2, 0x5, 0x5, 0x5, 0x7, 0x2, 0x2, 0x99b7, 0xec, 0x5, 0x7, 0x8, 0x7f, 0x1000, 0x2, 0x80, 0x6, 0x4e5, 0x8c7b, 0x0, 0x1, 0x9, 0x401, 0x1, 0x5, 0x5, 0xffff, 0x2f8, 0x8, 0x7, 0x5, 0x3, 0xfffffffe, 0x2, 0x2, 0x8000, 0x8, 0x401, 0x917, 0x9, 0x40, 0x8, 0x4, 0x1, 0x5, 0x9, 0x7, 0x4, 0x3, 0x2f, 0x0, 0x20000, 0x3ff, 0x4, 0xff, 0x3, 0x478, 0x4, 0x9, 0x0, 0x4, 0x1, 0x7f, 0x7ff, 0x1, 0x8, 0x6, 0x1, 0xffff, 0x9, 0x2, 0x6, 0x9, 0x6, 0x7ff, 0x800, 0x5, 0xe9f, 0x100, 0x2, 0xfffffff9, 0x81, 0x9, 0x7, 0x9, 0x9, 0x5, 0x2, 0x2, 0x3, 0x0, 0x8001, 0x7, 0x7, 0x2, 0x735, 0x81, 0x1, 0x10000, 0x6, 0x1ff, 0x800, 0x7fffffff, 0x6, 0x2, 0x8000, 0x5, 0x1, 0x9ec, 0x7fff, 0x6, 0x1, 0x800, 0xcd0, 0x80000000, 0x0, 0x1, 0xc8c1, 0x6, 0xfff, 0x44b5, 0x3, 0x8, 0x0, 0x9, 0x8, 0x9, 0x6, 0x3fe00000, 0x7, 0x4, 0xb3a6, 0x7fffffff, 0xfb, 0xd474, 0xffffff00, 0x8, 0xffffff4a, 0x2, 0x7ff, 0x100, 0x4, 0x0, 0x100, 0x3, 0xba, 0x8, 0x1ff, 0xbe3, 0x8, 0x9, 0x1, 0x689, 0xb, 0x7, 0xa, 0x9, 0xffff, 0xfffffffd, 0x3, 0x400, 0xdf48, 0x9, 0xfffffffe, 0x7fffffff, 0x1, 0x4, 0x81, 0x7fff, 0x8, 0x8, 0x4, 0x9, 0xfffffff7, 0x2, 0xe4fe, 0x8, 0x7, 0x6, 0x5, 0x80000001, 0x6d5, 0xd9f, 0x2, 0x88d, 0xfffffffe, 0xfd, 0x1, 0x7ff, 0x3ff, 0x1000, 0x94, 0x0, 0x9, 0x6, 0x8, 0x1ff, 0x7, 0x4, 0xa39, 0xff, 0x3f, 0x2, 0x235ac71d, 0x7fff, 0x2, 0x5, 0x855a, 0x7, 0x5, 0x57371af, 0x3, 0x101, 0x7, 0x100, 0xffffffce, 0x9, 0x6, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x8, 0x7, {0x7, 0x0, 0x2, 0x2, 0x5, 0x81}, {0x5, 0x0, 0x7ff, 0x0, 0x4, 0xffffe64b}, 0x23f, 0x2, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x4, 0x1ff, 0x4, 0x100, 0xd195, 0xffffffff, 0x55, 0x80000000, 0x5b3f, 0x6, 0x9592, 0xffff13aa, 0x1ff, 0x0, 0x40, 0x2193a508, 0x800, 0x9, 0x81, 0x7f, 0xe76, 0x0, 0x724f, 0x7fffffff, 0x3, 0x8, 0x5, 0x1f, 0x4, 0x1, 0x8, 0x6, 0x7a35, 0xfffffffc, 0xffffffff, 0xe1, 0x48, 0x7, 0x1, 0xfffffffc, 0xffffffff, 0x4010000, 0x0, 0x3, 0x1, 0x9, 0x17, 0x4, 0x800, 0x0, 0xed0, 0x8, 0x4, 0xf6fc, 0xffff, 0x10000, 0x7, 0x9, 0x7, 0x8, 0xa4c3, 0x19, 0x5, 0xfffffff9, 0x2, 0x8, 0x1, 0x0, 0xffffffff, 0x0, 0x1, 0x81, 0x27f, 0x10000, 0x3f, 0x2, 0x7, 0xfc000, 0x8, 0xd7, 0x5, 0xc4, 0xfb8, 0x3f, 0xff, 0x8, 0x81, 0x1, 0x81, 0x817, 0x78d, 0x6, 0xfffffffb, 0x5, 0xff46, 0x3cd2, 0x8, 0x10000, 0x5, 0x2, 0x80ad, 0x5, 0x4, 0x5, 0x3, 0x5, 0xffff, 0x10001, 0x2, 0x6, 0x0, 0x5e, 0x0, 0x3, 0xfffffffb, 0xfffffffd, 0xfffffffb, 0x6, 0xfffffffd, 0x3, 0x80000001, 0x10000, 0x770, 0xbc50, 0x8, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x7f, 0x8, 0x0, 0xffffffba, 0x9, 0xfffffff7, 0x9, 0xf8, 0x7f, 0x3, 0xa00000, 0x20, 0x4, 0x7, 0xfff, 0xeb2, 0x8000, 0x1, 0x1, 0x1, 0x9, 0xffff, 0x7f, 0x0, 0xb6f, 0x4, 0x800, 0x2, 0x1, 0x7b, 0x1000, 0x93, 0x9, 0xafb, 0x90bede2e, 0x3f, 0x6, 0x10001, 0x3ff, 0x3, 0xa052, 0x8000, 0x0, 0x1f, 0x8, 0x1f, 0x6, 0x4, 0x1000, 0x287a, 0x1000, 0x2, 0x1, 0x7, 0x9, 0x0, 0x48000000, 0x1000, 0x9, 0x6, 0x9, 0x6, 0x5, 0xa549, 0xffff, 0x2, 0x20, 0xf6513e9, 0x4, 0x499, 0x20, 0x1, 0xb7, 0x1, 0x7, 0x80000, 0x401, 0x4, 0x1, 0x9, 0x7fffffff, 0xcfd, 0xbae7, 0x5, 0x4, 0x5395, 0x5, 0xffffffff, 0x0, 0x101, 0xffffffff, 0x2, 0x601b, 0x3, 0x731, 0x1, 0x35, 0x7, 0x10001, 0xffff0001, 0x8, 0x36, 0x6, 0x6, 0x7f, 0x401, 0x800, 0x9, 0x8, 0x20, 0x3d, 0xfffffff7, 0x2, 0x5, 0x5, 0x401, 0xda, 0x9, 0x8000, 0x7, 0x5, 0x80, 0x100, 0x6, 0xd04]}]}, @TCA_BASIC_EMATCHES={0x494, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1}, {0x7, 0x2, 0x8, 0x0, 0x4}}}, @TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x9}, "52e0cb2ec28d9c0368b058ae9bfabc0ad967e5da997caa44f4e9b5f8d9df0f401b643d2ed5c824fad4a0bce0ea0ebb934d887d26dfbc1adc9319dd11b0e31eccca6537be9e3cbcefff33ad74086300873745bf1d35d18d686bbf99b40d199ca9c5a4d9e83bf849e561d3514876df9e1027e8d1fe07d26d43832ce72af2cb5f4ed3946eee0d66a2d6a405105040edbb4fe27d9b5d8f50b974c6ddb82731b5aeccb4f3fdcc34b75d5a6514ddb360e7d554caf515d36b85b5a60aef1fab9706632908bdb0e588a428c2bfcd7c66da2db602fc0eb48eafe8099236c5c90ebddd58917b68a03aa63ecf47b5f1a6cd41d355"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x9}, {0x1, 0xa0, 0x0, 0x9}}}, @TCF_EM_CONTAINER={0x18, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x100}, "714a35b1b93fe079239ddddd"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x4cd, 0x2, 0x3}, {0x6, 0x9, 0x2, "d2790c039fefbf5931"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x59}, {0x80000001, 0x75, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x94, 0x9, 0x100, 0x3, 0x2}}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x575c, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x1e, 0x5, "1199d9a88707fca88c1f7282a5ec183fcc08bc92a803b2760be7"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x9146}, "4186b2c8d6b5562ed2937e42a61c535942cca0e22692d45b7cf5835c728cf127a63da811cb1abe919a118b6d8facdc5374e97a893c0475b8a50fa3ab268be53258e5313ae442c7d025bcf721cae54572d07705b82972049ea5da599217298044920c98ce47d593cf8eae851018d849171f52afcf39e668b0bf129d94983a29387d0cf14c9b07e4a22696b9cf1897f939f7beda5aea3afefc4432dc9d4cfcb821c19e22ffe1eece5402a319a7be2c6f821b902bc1988d9b125033e097116ea0435bbd377e31d9b23592658e9a61316edb8eef7bf28cb24f970e922e3df27c69d4"}}, @TCF_EM_CONTAINER={0x20, 0x2, 0x0, 0x0, {{0x81, 0x0, 0x3}, "7db81ea5ca85cd5d375b59f0236a7399c1c960"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x6}, {0x5, 0x200, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x9}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x6}, {{0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x80}, {0x8, 0x4, 0x951d, 0x6, 0xb, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x4}, {0x98d639d9, 0x20000000, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x2, 0x3ff, 0x75, 0x0, 0xc, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xe60b, 0x8, 0x3}, {0x1, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x8, 0xff}, {0x1, 0x4}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="8d4d27986b4ab840bcc4", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b6207dae39", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c6"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="521c", @TCF_META_TYPE_VAR="21b5fd219c79757aaaaf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x56, 0xff}, {0x9, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6}, {0x3, 0x20, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x8}, {0x2, 0x3ff, 0x3, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5fe8, 0x3, 0x3f}, {0x6, 0x6, 0x80000000, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x400, 0x9, 0x1, "67cf862f0deceadf81"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x400}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xc}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x40, 0x3, 0x401, 0x3f, 0x8000, 0x6, 0x7, 0x43, 0x7f, 0xffffff00, 0x4, 0xffff, 0x3, 0x66e, 0x20, 0xd, 0x4, 0x4, 0x5, 0x69e8, 0x6, 0xffff8c69, 0xffc00000, 0x0, 0x200, 0xfffffff7, 0x6, 0x0, 0x7, 0x40000000, 0xfffffffb, 0xffffffc1, 0x1, 0x3, 0x8000, 0x15a, 0x8, 0x0, 0x1ff, 0x401, 0x0, 0x9, 0x3, 0x26, 0x5, 0x101, 0x978, 0x96, 0x0, 0xb4, 0x8001, 0x9, 0x3, 0xdee6, 0x1000, 0x400, 0x8001, 0x4, 0x101, 0x8, 0x80, 0x54c1, 0x8, 0xff, 0x8, 0x6, 0x400, 0x20, 0xffffffff, 0x6, 0x9, 0x9, 0x80, 0x2, 0x1ff, 0x0, 0xfffffffa, 0x6aaa, 0x9, 0x7, 0x3, 0x3, 0x1, 0x40, 0x10000, 0xfffffff7, 0x1, 0x1cb, 0xff, 0x0, 0x2, 0x9, 0x9, 0x10001, 0x7ff, 0x3ff, 0x3ff, 0x1ff, 0x6, 0xffff, 0x0, 0x8df, 0x40, 0x1, 0x7, 0x81, 0x40000, 0x3, 0x0, 0x200, 0x7, 0x43d, 0x2, 0x3, 0x66, 0xffffffe1, 0x1ff, 0x9, 0x5, 0xff, 0x80, 0xe3, 0x10000, 0x3, 0x8000, 0xf45, 0x6, 0x42, 0x4, 0x80000000, 0x2, 0x1ff, 0x60000000, 0xfffff093, 0x2, 0xf4fd, 0x9, 0x8d94, 0xffff0000, 0x1, 0x9, 0x7f, 0x80, 0x401, 0x4, 0xfff, 0x80000000, 0x0, 0x4, 0x2, 0x81, 0x0, 0x80000001, 0x0, 0xfff, 0x800, 0x80, 0x6, 0x4, 0x4, 0x610, 0x9, 0x3, 0x81, 0x9, 0x2, 0x80000001, 0x80000000, 0x8, 0x10001, 0x3, 0x7, 0x9, 0xe60, 0xffffffff, 0x1, 0x5, 0x10001, 0x3, 0x4, 0x6, 0x93c4, 0x100, 0x6, 0x80000001, 0x40, 0x4, 0x7fffffff, 0x80, 0x1, 0x6, 0x5, 0x4, 0x2, 0x2, 0x7fffffff, 0xbb2e, 0x3, 0x0, 0xffffffff, 0x0, 0x9, 0x3f, 0x9, 0x0, 0x7, 0x6, 0xc2, 0x2, 0xdc0, 0x7ed5, 0x1, 0x2, 0xe4, 0x7, 0x8, 0x40, 0xfffffffa, 0x5, 0x200, 0x40, 0x5, 0x2, 0xffffffa8, 0x40, 0xffff, 0x5, 0x7fffffff, 0x3f, 0x5cef, 0x1, 0x1, 0x4, 0x101, 0x2, 0x1, 0x5, 0xf5c0, 0x7f, 0x9, 0x1ff, 0x80000000, 0x2, 0x0, 0x0, 0x4, 0x0, 0x800, 0xfffffff9, 0x7, 0x1, 0x1ff, 0x9, 0x3ff, 0x3]}]}]}}]}, 0x221c}}, 0x80efce34118cfa04)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xcaccb55be121cf2, 0xad701e0666b9ee89}, {0xffff, 0xf}, {0xfff3, 0xffe0}}, [{0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xd253}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc004801)
connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80)
writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1)
recvfrom(r1, 0x0, 0xffffff70, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x20000003)
r3 = accept4(r2, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140))
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  789.914983] FAULT_INJECTION: forcing a failure.
[  789.914983] name failslab, interval 1, probability 0, space 0, times 0
[  789.950062] CPU: 0 PID: 12475 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  789.957985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  789.967342] Call Trace:
[  789.969941]  dump_stack+0x1b2/0x283
[  789.973584]  should_fail.cold+0x10a/0x154
[  789.979044]  should_failslab+0xd6/0x130
[  789.983022]  kmem_cache_alloc+0x28e/0x3c0
[  789.987349]  mmu_topup_memory_caches+0x83/0x300
[  789.992024]  kvm_mmu_load+0x1e/0xc90
[  789.995735]  ? kvm_apic_accept_events+0x16f/0x3f0
[  790.000581]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  790.005342]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  790.010274]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.015221]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  790.020063]  ? lock_acquire+0x170/0x3f0
[  790.024046]  ? lock_downgrade+0x6e0/0x6e0
[  790.028208]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  790.032362]  kvm_vcpu_ioctl+0x3df/0xc70
[  790.036341]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.042261]  ? trace_hardirqs_on+0x10/0x10
[  790.046500]  ? check_preemption_disabled+0x35/0x240
[  790.051554]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.056487]  ? proc_tid_io_accounting+0x20/0x20
[  790.061164]  ? HARDIRQ_verbose+0x10/0x10
[  790.065230]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.071121]  do_vfs_ioctl+0x75a/0xfe0
[  790.074954]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  790.080580]  ? ioctl_preallocate+0x1a0/0x1a0
[  790.085006]  ? security_file_ioctl+0x76/0xb0
[  790.089414]  ? security_file_ioctl+0x83/0xb0
[  790.093825]  SyS_ioctl+0x7f/0xb0
[  790.097219]  ? do_vfs_ioctl+0xfe0/0xfe0
[  790.101195]  do_syscall_64+0x1d5/0x640
[  790.105119]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  790.110306] RIP: 0033:0x45ca29
[  790.113489] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  790.121197] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  790.128554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  790.135822] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  790.143107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  790.150377] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:52 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:52 executing program 2 (fault-call:7 fault-nth:10):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:52 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:52 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:53 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x20000003)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r3 = dup(r2)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r6, 0x1000, "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"}, &(0x7f0000000000)=0x1008)
flistxattr(r0, &(0x7f0000000100)=""/220, 0xff44)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x1a4, 0x0)

[  790.378296] FAULT_INJECTION: forcing a failure.
[  790.378296] name failslab, interval 1, probability 0, space 0, times 0
[  790.390646] CPU: 0 PID: 12497 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  790.399413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  790.408768] Call Trace:
[  790.411350]  dump_stack+0x1b2/0x283
[  790.414985]  should_fail.cold+0x10a/0x154
[  790.419124]  should_failslab+0xd6/0x130
[  790.423090]  kmem_cache_alloc+0x28e/0x3c0
[  790.427252]  mmu_topup_memory_caches+0x83/0x300
[  790.431905]  kvm_mmu_load+0x1e/0xc90
[  790.435600]  ? kvm_apic_accept_events+0x16f/0x3f0
[  790.440429]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  790.445197]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  790.450121]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.455050]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  790.459875]  ? lock_acquire+0x170/0x3f0
[  790.463831]  ? lock_downgrade+0x6e0/0x6e0
[  790.467966]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  790.472106]  kvm_vcpu_ioctl+0x3df/0xc70
[  790.476085]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.481967]  ? trace_hardirqs_on+0x10/0x10
[  790.486187]  ? check_preemption_disabled+0x35/0x240
[  790.491202]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.496236]  ? proc_tid_io_accounting+0x20/0x20
[  790.500901]  ? HARDIRQ_verbose+0x10/0x10
[  790.504952]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.511104]  do_vfs_ioctl+0x75a/0xfe0
[  790.514896]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  790.520506]  ? ioctl_preallocate+0x1a0/0x1a0
[  790.524926]  ? security_file_ioctl+0x76/0xb0
[  790.529335]  ? security_file_ioctl+0x83/0xb0
[  790.533745]  SyS_ioctl+0x7f/0xb0
[  790.537096]  ? do_vfs_ioctl+0xfe0/0xfe0
[  790.541056]  do_syscall_64+0x1d5/0x640
[  790.544932]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  790.550109] RIP: 0033:0x45ca29
[  790.553282] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  790.561022] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  790.568305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  790.575563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  790.582908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  790.590178] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:53 executing program 2 (fault-call:7 fault-nth:11):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:53 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:53 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:53 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r1=>0x0)
sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x6, 0x10000000, 0x101, 0x6, 0x0, 0x6, 0x2, 0x8000, 0xffffffff}, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000000)='oom_adj\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:53 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
accept4(r1, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000080)={0x82, 0xa, &(0x7f0000000000)="ee5e056ce058b8f66b03efe3c9c2a560753df3fdcdcecbe4a24c27d143cb06e42271cdff98c4221aaed179895744201d136ff9981d517234d77197cbe56c6b256840b7fb1b4712338ec885f72499b826b70a713f", {0x0, 0x4c11, 0x31424752, 0x6, 0x7fff, 0x0, 0xd, 0xa59}})
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x1a4, 0x0)

[  790.765091] FAULT_INJECTION: forcing a failure.
[  790.765091] name failslab, interval 1, probability 0, space 0, times 0
[  790.813531] CPU: 1 PID: 12518 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  790.821727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  790.831091] Call Trace:
[  790.833693]  dump_stack+0x1b2/0x283
[  790.837336]  should_fail.cold+0x10a/0x154
[  790.841502]  should_failslab+0xd6/0x130
[  790.845490]  kmem_cache_alloc+0x28e/0x3c0
[  790.849648]  mmu_topup_memory_caches+0x83/0x300
[  790.854322]  kvm_mmu_load+0x1e/0xc90
[  790.858038]  ? kvm_apic_accept_events+0x16f/0x3f0
[  790.862932]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  790.867701]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  790.872647]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.877608]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  790.877619]  ? lock_acquire+0x170/0x3f0
[  790.877628]  ? lock_downgrade+0x6e0/0x6e0
[  790.877646]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  790.877655]  kvm_vcpu_ioctl+0x3df/0xc70
[  790.877668]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.877681]  ? trace_hardirqs_on+0x10/0x10
[  790.877691]  ? check_preemption_disabled+0x35/0x240
[  790.877703]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  790.877713]  ? proc_tid_io_accounting+0x20/0x20
[  790.877726]  ? HARDIRQ_verbose+0x10/0x10
[  790.877736]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  790.877750]  do_vfs_ioctl+0x75a/0xfe0
[  790.877763]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  790.877774]  ? ioctl_preallocate+0x1a0/0x1a0
[  790.877796]  ? security_file_ioctl+0x76/0xb0
[  790.877803]  ? security_file_ioctl+0x83/0xb0
[  790.877811]  SyS_ioctl+0x7f/0xb0
[  790.877819]  ? do_vfs_ioctl+0xfe0/0xfe0
17:48:53 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r5)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0xee01, r7, 0x0)
chown(&(0x7f00000000c0)='./file0\x00', r5, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  790.877830]  do_syscall_64+0x1d5/0x640
[  790.877845]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  790.877856] RIP: 0033:0x45ca29
[  790.975765] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  790.975778] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  790.975782] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  790.975787] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  790.975791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
17:48:53 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  790.975796] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:53 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:53 executing program 2 (fault-call:7 fault-nth:12):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:53 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x81420000a77, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x78)

17:48:53 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:54 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x5bc, 0x30}, &(0x7f0000000140)=0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:54 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:54 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  791.397523] FAULT_INJECTION: forcing a failure.
[  791.397523] name failslab, interval 1, probability 0, space 0, times 0
[  791.448461] CPU: 1 PID: 12556 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  791.456392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  791.465756] Call Trace:
[  791.468353]  dump_stack+0x1b2/0x283
[  791.471997]  should_fail.cold+0x10a/0x154
[  791.476154]  should_failslab+0xd6/0x130
[  791.480133]  kmem_cache_alloc+0x28e/0x3c0
[  791.484292]  mmu_topup_memory_caches+0x83/0x300
[  791.488990]  kvm_mmu_load+0x1e/0xc90
[  791.492707]  ? kvm_apic_accept_events+0x16f/0x3f0
[  791.497559]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  791.502338]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  791.502349]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  791.502379]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  791.502388]  ? lock_acquire+0x170/0x3f0
[  791.502397]  ? lock_downgrade+0x6e0/0x6e0
[  791.502416]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  791.502425]  kvm_vcpu_ioctl+0x3df/0xc70
[  791.502438]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  791.502451]  ? trace_hardirqs_on+0x10/0x10
[  791.502461]  ? check_preemption_disabled+0x35/0x240
[  791.502474]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  791.502485]  ? proc_tid_io_accounting+0x20/0x20
[  791.502498]  ? HARDIRQ_verbose+0x10/0x10
[  791.502509]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  791.502522]  do_vfs_ioctl+0x75a/0xfe0
[  791.502535]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  791.502548]  ? ioctl_preallocate+0x1a0/0x1a0
[  791.502569]  ? security_file_ioctl+0x76/0xb0
[  791.502578]  ? security_file_ioctl+0x83/0xb0
[  791.502588]  SyS_ioctl+0x7f/0xb0
[  791.502597]  ? do_vfs_ioctl+0xfe0/0xfe0
[  791.502610]  do_syscall_64+0x1d5/0x640
[  791.502624]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  791.502632] RIP: 0033:0x45ca29
[  791.502636] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  791.502644] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  791.502649] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  791.502653] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  791.502661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
17:48:54 executing program 2 (fault-call:7 fault-nth:13):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:54 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  791.647349] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:54 executing program 0:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0xd7, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000280)=""/215}, &(0x7f00000001c0)=0x78)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/hci\x00')
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x8)
preadv(r3, &(0x7f00000017c0), 0x1a4, 0x0)

[  791.738222] FAULT_INJECTION: forcing a failure.
[  791.738222] name failslab, interval 1, probability 0, space 0, times 0
[  791.752427] CPU: 1 PID: 12583 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  791.760380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  791.769737] Call Trace:
[  791.772335]  dump_stack+0x1b2/0x283
[  791.776091]  should_fail.cold+0x10a/0x154
[  791.780248]  should_failslab+0xd6/0x130
[  791.784222]  kmem_cache_alloc+0x28e/0x3c0
[  791.788377]  mmu_topup_memory_caches+0x83/0x300
[  791.793059]  kvm_mmu_load+0x1e/0xc90
[  791.796772]  ? kvm_apic_accept_events+0x16f/0x3f0
[  791.801705]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  791.806470]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  791.811402]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  791.816352]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  791.821200]  ? lock_acquire+0x170/0x3f0
[  791.825178]  ? lock_downgrade+0x6e0/0x6e0
[  791.829336]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  791.833486]  kvm_vcpu_ioctl+0x3df/0xc70
[  791.837466]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  791.843360]  ? trace_hardirqs_on+0x10/0x10
[  791.847599]  ? check_preemption_disabled+0x35/0x240
[  791.852623]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  791.857558]  ? proc_tid_io_accounting+0x20/0x20
[  791.862269]  ? HARDIRQ_verbose+0x10/0x10
[  791.866350]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  791.872256]  do_vfs_ioctl+0x75a/0xfe0
[  791.876062]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  791.881692]  ? ioctl_preallocate+0x1a0/0x1a0
[  791.886111]  ? security_file_ioctl+0x76/0xb0
[  791.890557]  ? security_file_ioctl+0x83/0xb0
[  791.894969]  SyS_ioctl+0x7f/0xb0
[  791.898348]  ? do_vfs_ioctl+0xfe0/0xfe0
[  791.902326]  do_syscall_64+0x1d5/0x640
[  791.906307]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  791.911670] RIP: 0033:0x45ca29
[  791.914855] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  791.922560] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  791.929825] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
17:48:54 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000004b40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8eb90698946139a225e4b05686a20b1ed589d6ce3e6e1ff9821ce7a6fc71b65ee7d493607c7e7e9973e3f2b13111ab77a3c0334121349b216a404e3cb2e59e42ac186c7df3b6108f966c6cd25011fea4a17290edbd0f3211e1529a37", 0x5c}, {&(0x7f00000001c0)="20a1ea6770377e676e23c4ed0dd47707713e17f2a574fe6d55bc58ca1d14d89d94fa35ad3768ceeff586f0bce911954eb226f0ff0a09166caddae311297f9b90673351a721f53703b1824a75046dce79daac24e227bf0394178c23c29ccee2b965ecf0c64c36672386d1d498d6b243cf0efe9f4f23b893e3635b02b90011c0954a392380ca520f6feb79d1", 0x8b}, {&(0x7f0000000280)="655f8aaf8af8b010d74a06ec34f6bcdea177da099c421e1878d83d149108ddd0491ba2d3b309d4a8077bb1e05bb9f2cea028cf2fb3819c95c5387dad8c77a8fa92e10d83b80fa0f4e0d9835b07bd997690ef7c64e6082d703a9e8fa7d7a2c8f031e8a9f04249d54c3d50e5a9ff5cb9c8d76379f1bc14d58616085cb651620e19e37d61ff32c8819e75705032bfd3f183e204850ccaf8a861bb4c32d709babf7481d2e53ce756005d12af1cad10c46e632b3ba366c9f2437b1c6491e20e834ae25d2867cb4271a9bbea11596d31303ddf749f3c4d8b113980a13420c410d54a906f315f66c1b251300b0b0492a658b11a91d7797637", 0xf5}], 0x3, &(0x7f0000000380)=[@assoc={0x18}, @op={0x13, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x40, 0x117, 0x2, 0x26, "1d8076920fc8c59d6e29e6dd76f048c6ffa8c2ebe1ee2c5a016f648a68ab26bbcd4990df24d2"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0xb8, 0x40}, {0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30, 0x20004084}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="9bb8815d", 0x4}, {&(0x7f0000000500)="1f8d7663f7dade3786e076c95a55e25bd3f63802c88a5243a5108b799ef75f7fd0426435939244ff1d0fe333257104032e59a746400c19ddfcdcb67226466da413c37ffda86549b76da246881ae3148062d0dd16f6b6af52ae2d45e37c4619086e7dc95233b3a9282259351e5a3f04b4e6e5dd543f318638eef7f0798f2de9232e032b9514f81b20200091f54f8f6a466843fe6a7642a63f9f87b2e8b8eb610fd351406573a2353dd70da967f57affde41a04a", 0xb3}, {&(0x7f00000010c0)="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", 0x1000}], 0x3, &(0x7f0000000600)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0xfffffff7}], 0x60, 0x42840}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)="9352bdf9456bbcc8ccdcb680d4cb8a7004bff2576f1fc20874e627c18aa52b16c6d840ab286f144ae14e68dcfb514e757ac1af4a5cf1", 0x36}, {&(0x7f00000006c0)="8e7632c0c196bb63e4dea4c5c761c235c2969ae6c98b2a7de07f21ef524f71ed0622bcc4a101dfe23ea8bdd72862de8052077ae8458c1ed93bf253e01ddabf7ece8421ea005368eb2591c683dc27f51951cfc978c85789eed50d42d15d65ccfef1f3e5e8023d1fb9de322b72e918f96ea7f6375f06399bc1a2a6e1dce12c70d5fd8192df4a2ba020e7602af3be194658682f105a8eab0f23bd9cbd43d2a993d70a867865d4446b24e1823f", 0xab}, {&(0x7f0000000780)="4f6f6db365b93086cd684a44182580f0c010376a37e71e3b77cb4b467a600cf3f619e0d9e68602351acc60b3fe7d887aa3f2c30c9a017eb284ac6d642031d47bdad9681d00dc9761c5853257d7f7aade96392736ce923e1b653bd5fc1468de7f76bac5e0afec57d40dae37d56cbee037faadd39a3690eb8f218caa727b74a71753a0976e374dbea438f63780092170e153fadfefdcab7300fc9b3c0e6125f57c31f729d772c32faa36a019ab6e6d8ef94078f3394a708fad2e886c78cc30de1028f234ef1cfac57eaccae66f6687205df00ac72a7f7066054ee4018901a4e7a3", 0xe0}, {&(0x7f00000020c0)="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", 0x1000}], 0x4, &(0x7f00000008c0)}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)="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", 0xfb}, {&(0x7f0000000a00)="4a283ba5cd6f3be882089e6a752414a2dca5279859b3321c31d13436e3cc1daf156043956ceb37c65afc71bee5084144b0732988a797d87dd66d8f0961f5d1097bc20c87f9d08ba3a659ed315e88ba829745411a659d8676a21f8dc196af0b66bba3e14c6422689382907f4464f447a460809e699d23f3cb9f760c13520a9ea779c88c7a5b", 0x85}, {&(0x7f0000000ac0)="cd940fdae6931f5a58966377d8609e9ba6e9996f04eeab0e58c8a6cdf61dd4a84593df6ef3", 0x25}, {&(0x7f0000000b00)="3027fa059b6f10228189574ff6df21a948080b27a6fb808299176bc7f49834ac41f6fbccd977feca495161db1f06da52cc1cc700f70736a259cc14fc3d98f612782d6545326942db04405719d7e7dbb090d970d26e0a172f527064f1bec00f6eac82e76a1aff6e0f6839", 0x6a}], 0x4, 0x0, 0x0, 0x804}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="d9986cbc41c18b5ec07ac787e3bb465c8e1f117052de460eeab599ec2e46e8e3e0d4c74e6c7ffa02072e7dc77f80645b57787ccc119471dcb964fd4d45756a67ba1188ffa92310d40a2313b0f995ca2e6245c7a53477d28fae5a019f1e4fccd80296252de5cdf59ab56d2bb56f0c", 0x6e}, {&(0x7f0000000c40)="6b5540ceb1ef9b1064363ad2df96d3f6597e6b63a1e83ed038710a87437b9321e155baccb8e905255889e5c1ce2abfdd2045310c4031c7b8206f3f71fafe8132bac8e1dcc751cc82a8ca0a6eb6ff32b13f43b2db376fdbdb45d1584d869282dfd0946c1c8c3af1f1daa969743b00ac9e288efa43ccb1a9fe6061e037e053ec174ec1c77c83cc2a9e26fb4a6212c139c56580c8315faf83d36c64229d49e517201bc61e90aeb300c48b1e5ef3f28b90d3a5b4f03add7aec9434ddd491fcb623cb62dc65b9e2a30ea5e4d4a460d93396778949b102f4618e8bcec541", 0xdb}, {&(0x7f0000000d40)="a22d140df9be8f2c5218ba973d39a02ca2ac39b257af956da499291c0e271820587ca8ef135f4356b01c4db36ccfd4aa44177d8ae3016461fa01cb0818873602ff6778e9fdafc7952fe331b9107325676f5fc15761ce1ec387ac9e2115601c8c8c", 0x61}, {&(0x7f0000004d40)="550bf3d4502111b7d2b6495b9d1dd9a36251e1b6fcdbdb7070d865d4d4dbf7d22321ce232d460c6ccb5ee9f6a3a46059ecbc126b5c9b95e9912227bd71118290fd39e2b5911b37802f383ff9c13765e55540565dac105851b6619f22a29c8aa77d6b42c34b5919f8dc1f3194c46ef8a5964c9ac967cfb327f2255c1e3768968eb154658f3161fda3bf261519e2f89e895a40b7c43fabfb2533349cda008e40e24695bbd9c07d948ae6492b2868b55c13703c950d24bb203a3a99d14fbb49edec", 0xc0}, {&(0x7f0000000e80)="7af880fdbac2beaa0435f5a4575933154b5410fb002c43f65c9259465ede9a1433ed332f01bc94499c7773401a5fff194d8ef19dbc11f0789221c09ca053f7e1b2", 0x41}], 0x5, &(0x7f0000000f80)=[@iv={0x40, 0x117, 0x2, 0x27, "678cd9a1ae71e2ae3e40652cf58e220ad79a23018d89be4dc626df74ea360872197113407dc661"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xe15}], 0x70, 0x20010105}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000030c0)="14a074694c39f3fe1d06c47fc858ab928b0b7f437ceaf4690d4f4775b17a4b8ccb3720d10dcb344ad4ea67a5e84ffa5192f8869278aa725988695bbedacb310d9ccc4e2058e693a29ce9bb21eea592981373f4fc185eccb9df0842e01deb81b75af066115d8817383080d45f32560ad2415601b761fe6e4ab178ec3e346c8410d05f77aee4e2afe1388c3608a7470b33c76209a9b03e3667ec42b23f740c20caa78b06454c90d902cbe92440fcfeef93cbd11fea36224d12b45aeb341b53d2e00003667e16214745479affbc665885847136111d37de79b1aad6", 0xda}, {&(0x7f00000031c0)="fb89b902b493561bd6743b7e926a2a9c79516ea043175711fd5a39f0241ec88a197749dcd8dc5be944672dc42fd53a7fc11148bebf55c9753f0d44202ebd973612b348af64afe1945ea1f144e8c0b84e164e1f67c20a44f3dcee6190e1573304d1459df6f252724f8b16cef5c14b104ff502b23cd40c47e2904b79f8dd4018cdfffee44e7412179fb5e974364a4b052b77057a937921", 0x96}, {&(0x7f0000003280)="80bccf7c1a9dc7010931c466b31feec995fdfb06de7b70956928d0f6759091dd80383c7943fb4753433066fbffe4a93e7f19ae81fd8bfff1a1abb0f0b72fae01ecec72087e3165b81e2ace64a36ea57f0f39e0949c652d9b508da2bead6ab30bc59f9e7ab04a11765385b0b52d6db09025d79044eba4a7ca2a8b7697fe2fce8f168f9a7dabb7b98e170e7f90bbaa78d199fa8de706d16ec86d41fe034068358af3d80f736d15a0acb69f6ac997f0ed77cd97026ef4e476abfdea51227e20f4d5db685356fe0308bd4f194dc1", 0xcc}], 0x3, &(0x7f0000001040), 0x0, 0xc040}, {0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="4628846ced44a6c1e51f9eed148a4b0efd7caacd4fef16e76a4ba36217828d1849acead7427c86be7e6c73c3ff6d1be82f99eb096e6a9547c0c6808f9ffbac408b6f0198b017d217ad87efe737878f8359dfc55b81834751cc080ee58d5b56a3406b429f3aaf5856897dee96d65f40fb41b99c75b966cd04bf009963176f7b1edab31658361e29fc85df12589682fbd5eff3d446de88c97e4dc950fc4e9b62b5a1163d9d5a8121e2d52aaa49d3af5112d1fcb133074b3c830f39d50a4602f3cbcd378081a916362e56b22ad354214f7d513bef63", 0xd4}, {&(0x7f0000004480)="5bea5635202ce3f4c8b122f01504dc83c7004c2caf5fe3c3bf7555939f88813c6558254fa0a34bd4056d8c82633ed6f754b66024cdf0f20ec1d81ab6d87144528a22463fbce8c64eff0addd1ccec31bdb6110455d362bbed7aa77104ab70f75ee09b85aedd7ac339d0177668c7d245ad450649f8e2adc80d1694915cdcf9313a153c85a3c9b77bb5e6865868a927cf43d65832e45dedc6a8bffb51b12eb38985fdee028435971dbdfa", 0xa9}, {&(0x7f0000004540)="6422260f7d9d3ef650b1a1f1b3b0377af4bb236cdffbc0aec45a8389139553fb0cce0965d8b2af4d87646b76992edb5e67c88ce27b992639921335ffd1cfb5face5152307f2ffe56204ebe73e5402b95eadd4f42a3be3b16f03bd90f619660e81b1f6c973d3cd6b66a5808a9d0c8b407273d107b049d82c43e83375b248df35353868fa781e2ee7a15fed17933a7c13b69c9b5cdd1d46d0260b62ccef0df0f91a1fbabd7f988edf89cb821efd63b04fcfaee9b869093388fb1d225cedb047a59163761c7d355d82bdf845891e65c09c8295e24dfd3832ef543b90a9c54", 0xdd}, {&(0x7f0000004640)="4a21a0f32034db73b7540389b2623126b8993db7ad21fc94fbdf7bdff26be528f3aa3a47036962c683a3b306ec936b4c4bcfb86ecf441dce964c5de27c22b1d02b0c8d3a1a66eba8e64ce907e2f35aae7d8f165b32e1c094dae3ba0fb704717a991720e36cf887bc0ff15330408b6c2ab3351e56ef80c8616e8fcadd4e985784cc08074bc882d094ad7337afff556ba6c6a4e9eae4078dd30406bbbd4be7065261a85ef3512e47cb97eed54a2d203e275a9fc213b7bbb7f9c018f19d466a2742e57fffe42484fe41568206aa202cce729453a407c150be0d247face9a1f92b1900d7726287dcbfe7ef9496e54430971ae19874c620f8a478cf2b585eff72", 0xfe}], 0x5, &(0x7f00000047c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x88, 0x117, 0x2, 0x6f, "f5f26f8e732a156673985b7ea202949033fe12ea56f4c8b277cff6b7cdf58664709099eb091be389183f4147dd841e63fc331e917cfd74193c007c5f5a73760e7f8ec95d46a3779f0ab55f6101cf8d3b5c04d54dd3ecb464c61d82a18b790a08b59f2e229c1dd26f7cbd542daf4db1"}, @assoc={0x18, 0x117, 0x4, 0x81}, @iv={0x90, 0x117, 0x2, 0x77, "191210807e8e86134b40ef75e647883195ef30fc4b4453517775d009c29d94551438707c54eb27456d1aee8bda8c7767d9decceda719e21a0c79adcf4242b511d7477f8bd7de7200111f34c2a3a2609bef7d309267408015ea9200eae243980628662c297db2550053571053760009a1fe6b26f0ba7238"}, @assoc={0x18}], 0x178, 0x4}, {0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004940)="ae4836bccd274c033608b31204b8ab850196ed1b656db3035e10507d6e793e988c2eecad70e787004228a21c86a9f901bd86c8fab2dc70bcb5f8c49ad8c3e1272b269243705080a20f80b986fcafb38f0cc9af695067d85313c10963ebb432bf62159d1204810eb0f8c2fdfd807de5f030a94a686aa0873435006008349be11dcfb49f044813e112fc0d6570f2fda13f563f57cd2a8f4d333018e1d837df3f9e01ce078c2b3ca45d282ff7f37f33595ca1de843ad1f7d3143477cb31fd2d3285", 0xc0}, {&(0x7f0000004a00)="9804bec20a178066115cda6f35f6cc1a267f8a2572f54863b4e091bcac27dc8e7cebcfead16b0b2f22e97564b8a762fcb604a4a447d538ec41711ddab060df8963", 0x41}], 0x2, &(0x7f0000004ac0)=[@op={0x18}, @op={0x18}, @op={0x18}], 0x48, 0x8000}], 0x9, 0x804)

17:48:54 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2240, 0x0)

[  791.937098] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  791.944365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  791.951630] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:54 executing program 2 (fault-call:7 fault-nth:14):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:54 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:54 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:54 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  792.240797] FAULT_INJECTION: forcing a failure.
[  792.240797] name failslab, interval 1, probability 0, space 0, times 0
[  792.252351] CPU: 1 PID: 12612 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  792.260255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  792.269610] Call Trace:
[  792.272212]  dump_stack+0x1b2/0x283
[  792.275859]  should_fail.cold+0x10a/0x154
[  792.280019]  should_failslab+0xd6/0x130
[  792.283993]  kmem_cache_alloc+0x28e/0x3c0
[  792.288152]  mmu_topup_memory_caches+0x83/0x300
[  792.292842]  kvm_mmu_load+0x1e/0xc90
[  792.296562]  ? kvm_apic_accept_events+0x16f/0x3f0
[  792.301411]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  792.306179]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  792.311117]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  792.316067]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  792.320915]  ? lock_acquire+0x170/0x3f0
[  792.324897]  ? lock_downgrade+0x6e0/0x6e0
[  792.329070]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  792.329079]  kvm_vcpu_ioctl+0x3df/0xc70
[  792.329093]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  792.329111]  ? trace_hardirqs_on+0x10/0x10
[  792.329121]  ? check_preemption_disabled+0x35/0x240
[  792.329134]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  792.329145]  ? proc_tid_io_accounting+0x20/0x20
[  792.329159]  ? HARDIRQ_verbose+0x10/0x10
[  792.329170]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  792.329184]  do_vfs_ioctl+0x75a/0xfe0
[  792.329196]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  792.329209]  ? ioctl_preallocate+0x1a0/0x1a0
[  792.329233]  ? security_file_ioctl+0x76/0xb0
[  792.329242]  ? security_file_ioctl+0x83/0xb0
[  792.329254]  SyS_ioctl+0x7f/0xb0
[  792.329263]  ? do_vfs_ioctl+0xfe0/0xfe0
[  792.329275]  do_syscall_64+0x1d5/0x640
[  792.406260]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  792.406272] RIP: 0033:0x45ca29
[  792.414652] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  792.414663] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  792.414668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
17:48:55 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  792.414673] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  792.414678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  792.414683] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:55 executing program 2 (fault-call:7 fault-nth:15):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:55 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  792.593944] FAULT_INJECTION: forcing a failure.
[  792.593944] name failslab, interval 1, probability 0, space 0, times 0
[  792.619192] CPU: 0 PID: 12634 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  792.628330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  792.637787] Call Trace:
[  792.640388]  dump_stack+0x1b2/0x283
[  792.644028]  should_fail.cold+0x10a/0x154
[  792.648188]  should_failslab+0xd6/0x130
[  792.652168]  kmem_cache_alloc+0x28e/0x3c0
[  792.656360]  mmu_topup_memory_caches+0x83/0x300
[  792.661038]  kvm_mmu_load+0x1e/0xc90
[  792.664750]  ? kvm_apic_accept_events+0x16f/0x3f0
[  792.669595]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  792.674359]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  792.679288]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  792.684234]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  792.689075]  ? lock_acquire+0x170/0x3f0
[  792.693545]  ? lock_downgrade+0x6e0/0x6e0
[  792.697697]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  792.701842]  kvm_vcpu_ioctl+0x3df/0xc70
[  792.705815]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  792.711701]  ? trace_hardirqs_on+0x10/0x10
[  792.715934]  ? check_preemption_disabled+0x35/0x240
[  792.720948]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  792.725878]  ? proc_tid_io_accounting+0x20/0x20
[  792.730551]  ? HARDIRQ_verbose+0x10/0x10
[  792.734625]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  792.740516]  do_vfs_ioctl+0x75a/0xfe0
[  792.744329]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  792.744343]  ? ioctl_preallocate+0x1a0/0x1a0
[  792.744365]  ? security_file_ioctl+0x76/0xb0
[  792.744374]  ? security_file_ioctl+0x83/0xb0
[  792.744385]  SyS_ioctl+0x7f/0xb0
[  792.744394]  ? do_vfs_ioctl+0xfe0/0xfe0
[  792.744409]  do_syscall_64+0x1d5/0x640
[  792.744427]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  792.744435] RIP: 0033:0x45ca29
[  792.744441] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
17:48:55 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x8, 0x3}, {0xa, 0x1}, {0x6, 0x5}, {0xa, 0x4}, {0x2, 0x4}, {0xc}, {0x9, 0x2}]}, @restrict={0xb, 0x0, 0x0, 0xb, 0x3}, @enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x1}, {0xd, 0xfff}, {0xc, 0x1}, {0xa, 0xfffffbff}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x4}, {0x3, 0xfffffff7}, {0x0, 0xfffff000}]}]}, {0x0, [0x61]}}, &(0x7f0000000280)=""/144, 0xf7, 0x90}, 0x20)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0xfffff800, 0xc, 0x4, 0x10, 0x6, {0x0, 0x2710}, {0x3, 0xc, 0x5, 0x76, 0x4, 0x3, "927467c9"}, 0xfffffffe, 0x1, @offset=0x6, 0x8001, 0x0, r2})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r3, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:55 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  792.744452] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  792.744458] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  792.744464] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  792.744469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  792.744475] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:55 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:55 executing program 2 (fault-call:7 fault-nth:16):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  792.967190] FAULT_INJECTION: forcing a failure.
[  792.967190] name failslab, interval 1, probability 0, space 0, times 0
[  792.984059] CPU: 0 PID: 12656 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  792.991977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  793.001461] Call Trace:
[  793.004065]  dump_stack+0x1b2/0x283
[  793.007707]  should_fail.cold+0x10a/0x154
[  793.011868]  should_failslab+0xd6/0x130
[  793.015846]  kmem_cache_alloc+0x28e/0x3c0
[  793.020001]  mmu_topup_memory_caches+0x83/0x300
[  793.024681]  kvm_mmu_load+0x1e/0xc90
[  793.028394]  ? kvm_apic_accept_events+0x16f/0x3f0
[  793.033241]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  793.038011]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  793.042951]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.047902]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  793.053789]  ? lock_acquire+0x170/0x3f0
[  793.057767]  ? lock_downgrade+0x6e0/0x6e0
[  793.061925]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  793.066080]  kvm_vcpu_ioctl+0x3df/0xc70
[  793.070109]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.075998]  ? trace_hardirqs_on+0x10/0x10
[  793.080232]  ? check_preemption_disabled+0x35/0x240
[  793.085253]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.090195]  ? proc_tid_io_accounting+0x20/0x20
[  793.090209]  ? HARDIRQ_verbose+0x10/0x10
[  793.090221]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.090235]  do_vfs_ioctl+0x75a/0xfe0
[  793.090248]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  793.090261]  ? ioctl_preallocate+0x1a0/0x1a0
[  793.090284]  ? security_file_ioctl+0x76/0xb0
[  793.090293]  ? security_file_ioctl+0x83/0xb0
[  793.090304]  SyS_ioctl+0x7f/0xb0
[  793.090313]  ? do_vfs_ioctl+0xfe0/0xfe0
[  793.090326]  do_syscall_64+0x1d5/0x640
[  793.090343]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  793.090351] RIP: 0033:0x45ca29
[  793.090356] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  793.090365] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
17:48:55 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:55 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  793.090369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  793.090373] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  793.090377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  793.090381] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:55 executing program 2 (fault-call:7 fault-nth:17):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:55 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

[  793.356713] FAULT_INJECTION: forcing a failure.
[  793.356713] name failslab, interval 1, probability 0, space 0, times 0
[  793.374333] CPU: 0 PID: 12679 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  793.382252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  793.391608] Call Trace:
[  793.394211]  dump_stack+0x1b2/0x283
[  793.397858]  should_fail.cold+0x10a/0x154
[  793.402020]  should_failslab+0xd6/0x130
[  793.405998]  kmem_cache_alloc+0x28e/0x3c0
[  793.410151]  mmu_topup_memory_caches+0x83/0x300
[  793.414911]  kvm_mmu_load+0x1e/0xc90
[  793.418620]  ? kvm_apic_accept_events+0x16f/0x3f0
[  793.423465]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  793.428229]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  793.433159]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.438102]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  793.442960]  ? lock_acquire+0x170/0x3f0
[  793.446939]  ? lock_downgrade+0x6e0/0x6e0
[  793.451099]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  793.455241]  kvm_vcpu_ioctl+0x3df/0xc70
[  793.459251]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.465148]  ? trace_hardirqs_on+0x10/0x10
[  793.469384]  ? check_preemption_disabled+0x35/0x240
[  793.474400]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.479327]  ? proc_tid_io_accounting+0x20/0x20
[  793.483999]  ? HARDIRQ_verbose+0x10/0x10
[  793.488067]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.493957]  do_vfs_ioctl+0x75a/0xfe0
[  793.497769]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  793.503396]  ? ioctl_preallocate+0x1a0/0x1a0
[  793.507815]  ? security_file_ioctl+0x76/0xb0
[  793.512218]  ? security_file_ioctl+0x83/0xb0
[  793.516625]  SyS_ioctl+0x7f/0xb0
[  793.520010]  ? do_vfs_ioctl+0xfe0/0xfe0
[  793.523983]  do_syscall_64+0x1d5/0x640
[  793.527877]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  793.533063] RIP: 0033:0x45ca29
[  793.536260] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  793.544408] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  793.551935] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  793.559198] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  793.566460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  793.573727] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:56 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:56 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:56 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:56 executing program 2 (fault-call:7 fault-nth:18):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:56 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8001, 0x84}, 0xc)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
rt_sigprocmask(0x3, &(0x7f0000000140), 0x0, 0x8)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
memfd_create(&(0x7f0000000180)='fd/3\x00', 0x4)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r1}}, 0x18)
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

[  793.798215] FAULT_INJECTION: forcing a failure.
[  793.798215] name failslab, interval 1, probability 0, space 0, times 0
[  793.815189] CPU: 0 PID: 12702 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  793.823112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  793.832472] Call Trace:
[  793.835077]  dump_stack+0x1b2/0x283
[  793.838719]  should_fail.cold+0x10a/0x154
[  793.842877]  should_failslab+0xd6/0x130
[  793.846856]  kmem_cache_alloc+0x28e/0x3c0
[  793.851009]  mmu_topup_memory_caches+0x83/0x300
[  793.855695]  kvm_mmu_load+0x1e/0xc90
[  793.859413]  ? kvm_apic_accept_events+0x16f/0x3f0
[  793.864260]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  793.869026]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  793.873957]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.878910]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  793.883756]  ? lock_acquire+0x170/0x3f0
[  793.887750]  ? lock_downgrade+0x6e0/0x6e0
[  793.891908]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  793.896056]  kvm_vcpu_ioctl+0x3df/0xc70
[  793.900037]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.905926]  ? trace_hardirqs_on+0x10/0x10
[  793.910162]  ? check_preemption_disabled+0x35/0x240
[  793.915183]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  793.920110]  ? proc_tid_io_accounting+0x20/0x20
[  793.924783]  ? HARDIRQ_verbose+0x10/0x10
[  793.928844]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  793.934731]  do_vfs_ioctl+0x75a/0xfe0
[  793.938537]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  793.944178]  ? ioctl_preallocate+0x1a0/0x1a0
[  793.948599]  ? security_file_ioctl+0x76/0xb0
[  793.953005]  ? security_file_ioctl+0x83/0xb0
[  793.957413]  SyS_ioctl+0x7f/0xb0
[  793.960777]  ? do_vfs_ioctl+0xfe0/0xfe0
[  793.964752]  do_syscall_64+0x1d5/0x640
[  793.970645]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  793.975828] RIP: 0033:0x45ca29
[  793.979013] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  793.986721] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  793.993987] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  794.001427] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  794.008697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  794.015969] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:56 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)

17:48:56 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:56 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:56 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000))
r1 = getpid()
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x3d, 0x3, 0x0, 0x200000000, 0x0, 0x0, 0x80000000}, 0x0)
perf_event_open(0x0, r1, 0x4, 0xffffffffffffffff, 0x1a)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ptrace$setregs(0xd, 0x0, 0xc3, &(0x7f0000000280)="40e276")
preadv(r3, &(0x7f00000017c0), 0x1a4, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x20000003)
r5 = accept4(r4, 0x0, 0x0, 0x0)
connect(r5, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000402}, 0x80c0)

17:48:57 executing program 2 (fault-call:7 fault-nth:19):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:57 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:57 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  794.542867] FAULT_INJECTION: forcing a failure.
[  794.542867] name failslab, interval 1, probability 0, space 0, times 0
[  794.574472] CPU: 0 PID: 12742 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  794.582512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  794.596057] Call Trace:
[  794.598693]  dump_stack+0x1b2/0x283
[  794.602341]  should_fail.cold+0x10a/0x154
[  794.606541]  should_failslab+0xd6/0x130
[  794.610531]  kmem_cache_alloc+0x28e/0x3c0
[  794.614700]  mmu_topup_memory_caches+0x83/0x300
[  794.619387]  kvm_mmu_load+0x1e/0xc90
[  794.623110]  ? kvm_apic_accept_events+0x16f/0x3f0
[  794.628048]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  794.632855]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  794.637800]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  794.642789]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  794.647664]  ? lock_acquire+0x170/0x3f0
[  794.654781]  ? lock_downgrade+0x6e0/0x6e0
[  794.658945]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  794.663103]  kvm_vcpu_ioctl+0x3df/0xc70
[  794.667093]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  794.672990]  ? trace_hardirqs_on+0x10/0x10
[  794.677251]  ? check_preemption_disabled+0x35/0x240
[  794.677264]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  794.677275]  ? proc_tid_io_accounting+0x20/0x20
[  794.677288]  ? HARDIRQ_verbose+0x10/0x10
[  794.677301]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  794.677314]  do_vfs_ioctl+0x75a/0xfe0
[  794.677327]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  794.677340]  ? ioctl_preallocate+0x1a0/0x1a0
[  794.677362]  ? security_file_ioctl+0x76/0xb0
[  794.677371]  ? security_file_ioctl+0x83/0xb0
[  794.677383]  SyS_ioctl+0x7f/0xb0
[  794.677392]  ? do_vfs_ioctl+0xfe0/0xfe0
[  794.677404]  do_syscall_64+0x1d5/0x640
[  794.677421]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  794.677430] RIP: 0033:0x45ca29
[  794.677436] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  794.677445] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  794.677449] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  794.677453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  794.677457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  794.677462] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:57 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:57 executing program 2 (fault-call:7 fault-nth:20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  794.951294] FAULT_INJECTION: forcing a failure.
[  794.951294] name failslab, interval 1, probability 0, space 0, times 0
[  794.977731] CPU: 0 PID: 12761 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0
[  794.986034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  794.995429] Call Trace:
[  794.998132]  dump_stack+0x1b2/0x283
[  795.001775]  should_fail.cold+0x10a/0x154
[  795.005940]  should_failslab+0xd6/0x130
[  795.010012]  kmem_cache_alloc+0x28e/0x3c0
[  795.014177]  mmu_topup_memory_caches+0x83/0x300
[  795.018869]  kvm_mmu_load+0x1e/0xc90
[  795.022589]  ? kvm_apic_accept_events+0x16f/0x3f0
[  795.027526]  ? kvm_lapic_enable_pv_eoi+0xc0/0xc0
[  795.032383]  kvm_arch_vcpu_ioctl_run+0x371f/0x58f0
[  795.037348]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  795.037373]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  795.037381]  ? lock_acquire+0x170/0x3f0
[  795.037391]  ? lock_downgrade+0x6e0/0x6e0
[  795.037410]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  795.037420]  kvm_vcpu_ioctl+0x3df/0xc70
[  795.037433]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  795.037447]  ? trace_hardirqs_on+0x10/0x10
[  795.037457]  ? check_preemption_disabled+0x35/0x240
[  795.037470]  ? perf_trace_lock_acquire+0x10d/0x4b0
[  795.037481]  ? proc_tid_io_accounting+0x20/0x20
[  795.037495]  ? HARDIRQ_verbose+0x10/0x10
[  795.037505]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  795.037519]  do_vfs_ioctl+0x75a/0xfe0
[  795.037533]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  795.037546]  ? ioctl_preallocate+0x1a0/0x1a0
[  795.037568]  ? security_file_ioctl+0x76/0xb0
[  795.037576]  ? security_file_ioctl+0x83/0xb0
[  795.037588]  SyS_ioctl+0x7f/0xb0
[  795.037597]  ? do_vfs_ioctl+0xfe0/0xfe0
[  795.037609]  do_syscall_64+0x1d5/0x640
[  795.037625]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  795.137774] RIP: 0033:0x45ca29
[  795.137780] RSP: 002b:00007f71f4739c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
17:48:57 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:57 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000002640)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/217, 0xd9}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000001380)=""/166, 0xa6}, {&(0x7f00000057c0)=""/143, 0x8f}, {&(0x7f0000001500)=""/93, 0x5d}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/143, 0x8f}], 0xa, &(0x7f0000002700)=""/91, 0x5b}, 0x5}, {{&(0x7f0000002780)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000002800)=""/150, 0x96}, {&(0x7f00000028c0)=""/5, 0x5}, {&(0x7f0000005880)=""/218, 0xda}, {&(0x7f0000002a00)=""/165, 0xa5}, {&(0x7f0000002ac0)=""/71, 0x47}], 0x6, &(0x7f0000002bc0)=""/135, 0x87}, 0x266}, {{&(0x7f0000002c80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002d00)=""/179, 0xb3}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/222, 0xde}, {&(0x7f0000002f00)=""/214, 0xd6}], 0x4, &(0x7f0000003040)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004040), 0x80, &(0x7f0000004600)=[{&(0x7f00000040c0)=""/149, 0x95}, {&(0x7f0000004180)=""/228, 0xe4}, {&(0x7f0000004280)=""/20, 0x14}, {&(0x7f00000042c0)=""/111, 0x6f}, {&(0x7f0000004340)=""/79, 0x4f}, {&(0x7f00000043c0)=""/140, 0x8c}, {&(0x7f0000004480)=""/30, 0x1e}, {&(0x7f00000044c0)=""/208, 0xd0}, {&(0x7f00000045c0)=""/11, 0xb}], 0x9}, 0x2}, {{&(0x7f00000046c0)=@sco, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004740)=""/48, 0x30}, {&(0x7f0000004780)=""/144, 0x90}, {&(0x7f0000004840)=""/11, 0xb}, {&(0x7f0000004880)=""/26, 0x1a}, {&(0x7f00000048c0)=""/56, 0x38}, {&(0x7f0000004900)=""/250, 0xfa}, {&(0x7f0000004a00)}, {&(0x7f0000004a40)=""/150, 0x96}], 0x8, &(0x7f0000004b80)=""/35, 0x23}}, {{&(0x7f0000004bc0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c40)=""/112, 0x70}, {&(0x7f0000004cc0)=""/92, 0x5c}], 0x2, &(0x7f0000004d80)=""/131, 0x83}, 0x10000}, {{&(0x7f0000004e40)=@sco, 0x80, &(0x7f0000005040)=[{&(0x7f0000004ec0)=""/229, 0xe5}, {&(0x7f0000001440)=""/123, 0x7b}], 0x2, &(0x7f0000005080)=""/43, 0x2b}}, {{&(0x7f00000050c0)=@hci, 0x80, &(0x7f0000005340)=[{&(0x7f0000005140)=""/78, 0x4e}, {&(0x7f00000051c0)=""/11, 0xb}, {&(0x7f0000005200)=""/66, 0x42}, {&(0x7f0000005280)=""/175, 0xaf}], 0x4, &(0x7f0000005380)=""/13, 0xd}, 0xe06}, {{&(0x7f00000053c0)=@alg, 0x80, &(0x7f0000005540)=[{&(0x7f0000005440)=""/214, 0xd6}], 0x1}, 0x10001}], 0x9, 0x20002002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

[  795.137789] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  795.137798] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  795.163231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  795.163237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  795.163241] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f71f473a6d4
17:48:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:57 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:57 executing program 2 (fault-call:7 fault-nth:21):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:58 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x400000000000041, 0x2003, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:58 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
migrate_pages(r3, 0x0, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0xff)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:48:58 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:48:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:58 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "e804ab696a5c49b2", "dcb62be05db3441b6155c2528a332414", "7610d879", "aa31fab2e16c2529"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000040)=0x7ff)
r3 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r3, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:48:58 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000040)={0x0, &(0x7f0000000000)="0f78a9", 0x3})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x20000003)
r3 = accept4(r2, 0x0, 0x0, 0x0)
connect(r3, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @reserved="1c2d4c79c518a76dd0d8aee12be33bcc362c1eaaa442258dbfe5853a94865859"}})
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:58 executing program 4:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:58 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:58 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:58 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x18102, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x7fff, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:58 executing program 4:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
pause()
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:59 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x18102, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000040)=0x7fff, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:48:59 executing program 4:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x2080, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000001040)={0x9, 0x0, &(0x7f0000001000)=[<r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000010c0)={&(0x7f0000000fc0)=[0x43], 0x1, 0x800, r3, r0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000001100))
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400130f00004007a2a3000500000000", @ANYRES32=r7, @ANYBLOB="00000000ffffbabce2cb00000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x854, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9}}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x11c}, {0xdc, 0x0, 0x0, 0x0, 0x0, 0x6}}}]}]}}]}, 0x884}}, 0x80efce34118cfa04)
sendmsg$nl_route_sched(r1, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="200d000000000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="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"], 0xd20}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x7, 0x2, 0x5, 0x7}, {0x40, 0x7f, 0xf7, 0x4}, {0x1000, 0x8, 0x2, 0x3}, {0x5, 0x6, 0xff, 0x3}, {0x0, 0x8, 0x2, 0xffff}, {0x617, 0xef, 0x4, 0x8}]})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:48:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
eventfd(0x5)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:48:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:48:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:00 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 1:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 0:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
accept4(r0, 0x0, 0x0, 0x0)
r1 = accept4(r0, &(0x7f0000005700)=@rc={0x1f, @fixed}, &(0x7f0000005780)=0x80, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05aa4f5089d6aefe280010000000140001e2734ff40bb3774caf2d2c231476083832980ed5efe89f3192123c63b69499eb9f69412bc19636174926cd6c3a3b2e138405e1bf95ec33b0821cafe9d16350069ac12e1c49f0048a5376816f4afeafb13720eae4a11783"], 0x28}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000058c0)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x73942ae395be90c0}, 0xc, &(0x7f0000005880)={&(0x7f0000005800)={0x6c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc005)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x20000003)
accept4(r5, 0x0, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000027c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000002d40)=0x2c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
recvmmsg(r4, &(0x7f0000005580)=[{{&(0x7f0000000000)=@ax25={{0x3, @rose}, [@rose, @default, @default, @bcast, @bcast, @null, @netrom, @rose]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/148, 0x94}], 0x2, &(0x7f0000001280)=""/142, 0x8e}, 0xfffffff8}, {{&(0x7f00000001c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001340)=""/68, 0x44}, {&(0x7f00000013c0)=""/51, 0x33}, {&(0x7f0000001480)=""/11, 0xb}, {&(0x7f00000014c0)=""/167, 0xa7}, {&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/133, 0x85}], 0x7, &(0x7f0000002700)=""/5, 0x5}, 0xffffffff}, {{&(0x7f0000002740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000027c0)}, {&(0x7f0000002800)=""/200, 0xc8}, {&(0x7f0000002900)=""/147, 0x93}], 0x3, &(0x7f0000002a00)=""/126, 0x7e}, 0x9}, {{&(0x7f0000002a80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/170, 0xaa}], 0x1}, 0x100}, {{&(0x7f0000002c00)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/172, 0xac}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/136, 0x88}], 0x3, &(0x7f0000003180)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002e80)=@nfc, 0x80, &(0x7f0000005480)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/255, 0xff}, {&(0x7f0000003000)=""/35, 0x23}, {&(0x7f0000003040)=""/184, 0xb8}, {&(0x7f0000005180)=""/240, 0xf0}, {&(0x7f0000005280)=""/250, 0xfa}, {&(0x7f0000005380)=""/234, 0xea}], 0x7, &(0x7f0000005500)=""/77, 0x4d}, 0x4}], 0x6, 0x10002, &(0x7f0000003100))
preadv(r6, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:00 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002400078008000840000000001800018014000240fe880000000000000800510b7b25000105000500020000000500010006000000000000000000000000000000a6c358577429d13e7038fcc50412af2ccc5924ed9a0c54b1001628dccc89c6691a3b6171195d63461fa1c36735d0c3ceaf555ebb60baf8b3bda58ce9cf37beb1c928f0ce10c48709a615d82b1f91814256c32af20f178d8a613711931b4c3c429ac3daf7b766ad2cc3e8b3be05b1f5b758b5af480cb1"], 0x6c}}, 0x4000040)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@null='               \x00', 0x4, 'hsr0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00', 0x100})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000140))
r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_STAT(r4, 0xd, 0x0)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000000)=""/116)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

[  797.535269] device ip6tnl0 entered promiscuous mode
17:49:00 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1080800, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d6691000600646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cachetag=_posix_acl_access,smackfsfloor=.lo,,audit,\x00'])
r3 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r3, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r6, 0x20000003)
accept4(r6, 0x0, 0x0, 0x0)
sync_file_range(r6, 0x4, 0x8, 0x2)
read$usbfs(r5, &(0x7f0000000200)=""/109, 0x6d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17:49:00 executing program 1:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 0:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@initdev, <r3=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000440)={@dev={0xfe, 0x80, [], 0x40}, 0x18, r3})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r4, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:00 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0xffff, 0xc, 0x0, "7e2c7df60365cb16bc0fc2ac082e6682a05f510c7651a53f0bc30b96422b1960", 0x38323151})
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:49:00 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x10000, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:00 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:49:00 executing program 1:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:00 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040))

17:49:01 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r2}, 0x7fff, 0x6, 0x9})

17:49:01 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x401, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000280)={0xa, 0x0, {0x54, 0x40, 0x5, {0x1, 0xeb3c}, {0x1ff, 0xaf}, @ramp={0x80, 0x2, {0xa55, 0x6, 0x2, 0x19b}}}, {0x2, 0x8001, 0x3, {0x9086, 0x4}, {0x2, 0x8}, @const={0x8000, {0xffff, 0x5, 0x8000, 0x8cc6}}}})
r4 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x20000003)
r6 = accept4(r5, 0x0, 0x0, 0x0)
connect(r6, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000300)={0x1, 'ipvlan0\x00', {}, 0x3})
r7 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x40080)
recvfrom$inet6(r7, &(0x7f0000000140)=""/170, 0xaa, 0x40000000, &(0x7f0000000200)={0xa, 0x4e21, 0xffff, @mcast1, 0x200}, 0x1c)

17:49:01 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xb, r0, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:01 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
r2 = accept4(r1, 0x0, 0x0, 0x0)
connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:49:01 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:49:01 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:01 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:01 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:01 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0)
setsockopt(r1, 0x541, 0x400, &(0x7f0000000280)="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", 0x1000)

17:49:01 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x800000080004103)

17:49:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
readahead(r2, 0x4, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x18100, 0x0)
ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000080)=0x3)

17:49:01 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:01 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:01 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

17:49:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x501240, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000200))
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r4 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r4, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200a00, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x19)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17:49:02 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000000206ffff0000000000000000000000000e0003006269746d61703a000400000000000900020073797a30000000002400078008000840000000001800018014000240fe88000000000000000000000000000105000500020000000500010006000000ec9aa872fefb3e5fbe77b4eec1526a5960776b3b30cfcdfbe1b14e76407ddd23a40cea6fa7cb43338cfa0a209db34ef1"], 0x6c}}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000300)='minix\x00', &(0x7f0000000340)='./file0\x00', 0x1000, 0x3, &(0x7f0000000500)=[{&(0x7f0000000380)="979933e7fe6945cdeb14005eaa1596ef1e89585a13dc471b0fab9267cab50af3d7c65446621b520f611a54c6d46d7784ffa215d6b2184b", 0x37}, {&(0x7f00000003c0)="f2847707fc1f189a534e67689bb8acf2c0ae767194d93afe6f932d93f38fa4b1e8a308555d35a90a65c4ea13abd4eddcf499924caf09dc27d9fb9419087f801b3d8b6f21d3cad7d838e9b12aef3500a07e06e0f1a7d0cf54e7b0", 0x5a, 0x10001}, {&(0x7f0000000440)="0e2c4991bd714cb643da4658c49fed09fabf5dfbb0ce150cc7af22e26c5f858c61e60d7d0bef1b601e8ca92abf372d1cf4ad691c0d6aac1f778ccfa4b36315b9a907a429deaf3492792b0b7c31f9fe8efc49ee73b1b08d0618941287e326b7129b115d0d5140b44b4c8045d1162269aabaf05ca94d62959549deccb62b35dfb4daf62eac03", 0x85, 0x7f}], 0x20, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
write$FUSE_LK(r2, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x8, {{0xfffffffffffffffa, 0x80000000, 0x2, r3}}}, 0x28)
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)="31eade3b9813baf9e75d8070cebe82b98750f95a7c03ca913af088bf0079a3440c6fe2b1f36999c2d154e0ce2d7ad9c898f71cf5a2f91323a4298be2f2bc876a9bba0a45857082aa3f79707de1834a2314a63d96e9007107b280d0f521411df962a0057830fa22f3774af4b905", &(0x7f00000001c0)="c2c39a8ec23e914ba7ed5e385c5c3e79adb0c71820302842a9c0ef016eddf8773f49c44a6a72ead9cc74747109dca1429007f8409f17c29fafd2990f6d0fb959afa15ab753f12393bffcc99d97cf1fd5f8c20af73f9e90551a981f1b287600aaaebeb29fa2d70f1306ec0be7e46c0e776509c6cdb014d9b4703d90448767cf6e9670e3af81064359a6fc5ca708857cc2a6ec1eb1f88202b2d24b650cd67790ddbdaf83609f618be084e1599974b62d0f04d313498857f5b72c9414560016e4c944f6d190ecc07cb4307e1d", 0x6d, 0xcb})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r5)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:49:02 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0xdd)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:02 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:02 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:49:02 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:02 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
perf_event_open(0x0, 0xffffffffffffffff, 0x9, r0, 0x0)
recvmmsg(r1, &(0x7f0000003140), 0x3fffe8c, 0x0, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8080, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x2000, 0x5000, 0xc, 0x20, 0x3b, 0x8, 0x20, 0x3, 0x81, 0x6, 0xff, 0x93}, {0x0, 0x5000, 0x8, 0x1, 0x7f, 0x0, 0x0, 0xf7, 0x36, 0xfe, 0x0, 0x3}, {0xd000, 0x1, 0xa, 0x9, 0x3c, 0x7e, 0x0, 0x1, 0x7, 0x5, 0x1f, 0xa5}, {0x3005, 0x0, 0xc, 0x6, 0xfc, 0x2, 0xfa, 0x7, 0x81, 0x9, 0x9, 0x1}, {0x1000, 0x6000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x7, 0x2, 0xff, 0x4, 0x3}, {0x3000, 0x6000, 0xd, 0x2, 0x3, 0x66, 0x1f, 0x40, 0xff, 0x1, 0x5, 0x4}, {0x2, 0x1, 0x0, 0x9, 0x2, 0x1, 0x0, 0x4, 0x9, 0x6, 0xb5, 0x81}, {0xd000, 0x0, 0xe, 0x0, 0x1, 0x81, 0x20, 0x0, 0x6, 0x4, 0xdf, 0x2d}, {0x4, 0x874}, {0xf000, 0x81}, 0x50000, 0x0, 0x6000, 0x480120, 0xc, 0x400, 0x1, [0xffffffffffffff95, 0x981, 0x81]})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
vmsplice(r6, 0x0, 0x0, 0x0)
ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000340)=0x2)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x84)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r7, &(0x7f00000017c0), 0x1a4, 0x0)
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000080)={0x3, 0x4, [0xff]})
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

17:49:02 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = getpid()
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x400, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00')
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1, 0x6, 0xa, 0x8, 0xce0})
preadv(r2, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:02 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xa4, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

17:49:02 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:49:02 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x1000, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:02 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:49:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:02 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103)

17:49:02 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206ffff0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002400078008000840000000001800018014000240fe880000000000000000000000000001050005000200000005000100060000191074078451f37430d8a26faf00"], 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)

17:49:03 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:03 executing program 3:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0xffffffffffffff65, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x7, 0x8, 0xd71, 0x4d79, 0x6, "423c76d087a0f3f0377c691c1a4976881295d6"})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000140)=""/194)

17:49:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000feb000/0x2000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff})
vmsplice(r5, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r6=>0x0})
ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000140)={r6, 0x2, &(0x7f0000000040)=[0x8, 0x0], &(0x7f0000000080), 0x10, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=[0x4, 0x5, 0x4, 0x0, 0x2000001, 0xfffffffd, 0x9, 0x6, 0x401]})
ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000040)={r6, 0x1})
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x20000003)
r7 = accept4(r5, 0x0, 0x0, 0x800)
ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
connect(r7, &(0x7f00007a8000)=@nl=@unspec, 0x80)
sendto$unix(r7, &(0x7f0000000140)="b7b055481aef6f4d56801a9919c95e6cca0372c3eb33af06b0eab32aca0de4ad7a284a7e011df470ab07573539e47e0ba62da386af63fe5c91ab338bc1eba840af6a120fd7076a08a41225a638d6b3c8c79c0a0119bb69948cc9056140aa4c3e064cebe1c07e5148796bc87ec14ee63834c1554520435c38a289155f154ace3f845e7e9e2d2c2c9e76f7e834a105cce2ae7034491b4c7002a99d3ec15bc06dc3fcd444163a9b9991b321d72f54a9b57d2ca53fd50b92979c01e2fc43d4dea49130bbda66802797", 0xc7, 0x0, 0x0, 0x0)

17:49:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000140)="73046f6bf8a149b4d371ded46c753aa39aadf9a22276e9044183457699c33b5a8391fcb84a19c1fb6e0a35d1ea2584ba17afcd923e1722d43358bbfe1e609aa59031528f685b04f4ddd248f119d3f36920266ad1458e11a779ed205bd02762e74fb80980d29eadc6ee4c1d84bbd70e308309050d635eba021faaf238c06f2cf3314486a46dee9198d59da7db99510def84be7d36a1bdacedb6", 0x99)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3)
r5 = socket$tipc(0x1e, 0x2, 0x0)
accept4$tipc(r5, 0x0, &(0x7f0000000040), 0x80800)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

17:49:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:49:05 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

17:49:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r2, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r5, 0x20000003)
accept4(r5, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5)

17:49:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r4, r3, 0x0, 0x800000080004103)

17:49:05 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  802.645256] ------------[ cut here ]------------
[  802.650595] kernel BUG at arch/x86/mm/physaddr.c:27!
[  802.723388] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  802.728824] Modules linked in:
[  802.732017] CPU: 1 PID: 13364 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0
[  802.739887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  802.749237] task: ffff888000100640 task.stack: ffff88820aeb8000
[  802.755296] RIP: 0010:__phys_addr+0x80/0xe0
[  802.759607] RSP: 0000:ffff88820aebfc08 EFLAGS: 00010297
[  802.764970] RAX: ffff888000100640 RBX: 0007070000000707 RCX: 1ffff110000201dd
[  802.772232] RDX: 0000000000000000 RSI: ffff888000100ef0 RDI: 0007070000000707
[  802.779495] RBP: 0007070080000707 R08: 0000000000000001 R09: 0000000000000000
[  802.786762] R10: 0000000000000000 R11: 0000000000000000 R12: 00077e8000000707
[  802.794894] R13: 0007070000000707 R14: ffff88820aebfc68 R15: 0000000000000000
[  802.802194] FS:  0000000001769940(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
[  802.810415] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  802.816292] CR2: 00007ffc37973e68 CR3: 0000000091fb4000 CR4: 00000000001426e0
[  802.823557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  802.830823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  802.838092] Call Trace:
[  802.840677]  qlink_to_cache+0x5/0x30
[  802.844385]  qlist_free_all+0xb6/0x110
[  802.848271]  quarantine_reduce+0x140/0x170
[  802.852502]  kasan_kmalloc+0x95/0xc0
[  802.856211]  kmem_cache_alloc+0x111/0x3c0
[  802.860365]  ptlock_alloc+0x1d/0x70
[  802.863989]  pte_alloc_one+0x57/0x100
[  802.867787]  __handle_mm_fault+0x29f2/0x3700
17:49:05 executing program 5:
openat$ppp(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x2}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f000001d000)={0x1, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9af8b9cd4cd39a6d3ae3b9f4461cd8481c6e32", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303031303030300200000065725f69640b21863ec931f0808d6acf5575a42c9151066132350190b3d55f52d93abc8a22be53aad6533e6931edc7a3fef296ca4be827d001001100bbdafb402d6230bbbed938a6fa8300000000000000000000000000000000009f1e02d08eb5f46400998809c34bc29ad0902e27", @ANYBLOB, @ANYRESHEX, @ANYBLOB="5626eaf450e4798088184a39e7762a90ccdccd1c856e06b2e4eb15e2fdc1f2632a3bdcfcb600d938c24c2cbd8abd3ad735f355b5cef8ccf9af68826d3aba3e19e37bd1f8e08a567cfc1f5e71e00d40add97e754008c90e52f084c8bb660d94742b7f26da076324846dadebff59cc902af9f52640e7e50e4bd5ee0b6e325f40d0b89ea0c2b9bcf4cee6f7bd42d34343d23b0b4dc0f9b84a060fa4724586eec2c4920819f7aaee2be3f52db33afdaff9ef0d39c99f08637ad7cad8dffe5355e2a43292558742acbaace8433e487ec8b6cd9dd7f9be0abd9f85a7122b6336a0ebdd2367206c9fc5fe074f"])
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r5, r4, 0x0, 0x800000080004103)

[  802.872206]  ? vm_insert_mixed_mkwrite+0x30/0x30
[  802.876969]  handle_mm_fault+0x306/0x794
[  802.881025]  __do_page_fault+0x578/0xb50
[  802.885084]  ? mm_fault_error+0x2c0/0x2c0
[  802.889230]  ? do_page_fault+0x60/0x4f2
[  802.893198]  ? page_fault+0x2f/0x50
[  802.896838]  page_fault+0x45/0x50
[  802.896844] RIP: 0000:          (null)
[  802.896848] RSP: 38c18f80:00007ffd38c18fc0 EFLAGS: 00000001
[  802.896861] Code: c2 7f 04 84 d2 75 26 0f b6 0d b6 5b 48 07 4c 89 e0 48 d3 e8 48 85 c0 75 0d e8 cd 13 31 00 4c 89 e0 5b 5d 41 5c c3 e8 c0 13 31 00 <0f> 0b 48 c7 c7 49 e9 71 88 e8 82 55 5a 00 eb cc e8 ab 13 31 00 
[  802.897018] RIP: __phys_addr+0x80/0xe0 RSP: ffff88820aebfc08
[  802.939732] ---[ end trace 45599360411f2d6b ]---
[  802.939738] Kernel panic - not syncing: Fatal exception
[  802.941032] Kernel Offset: disabled
[  802.979462] Rebooting in 86400 seconds..