ndfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 15:30:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}, {&(0x7f0000000740)="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", 0x3cb, 0x7f}], 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0xcf1, &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fchdir(r1) r6 = open(&(0x7f0000000080)='./file0\x00', 0x60c5, 0x0) write$9p(r6, &(0x7f0000001400)=';', 0x20001401) timerfd_gettime(r6, &(0x7f0000000000)) [ 186.059828] audit: type=1804 audit(1591543849.777:38): pid=8691 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir042982808/syzkaller.94Qi5q/21/bus" dev="sda1" ino=15831 res=1 15:30:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) r1 = msgget$private(0x0, 0xd5) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/194) 15:30:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}, {&(0x7f0000000740)="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", 0x3cb, 0x7f}], 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0xcf1, &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) fcntl$setflags(r1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fchdir(r1) r6 = open(&(0x7f0000000080)='./file0\x00', 0x60c5, 0x0) write$9p(r6, &(0x7f0000001400)=';', 0x20001401) timerfd_gettime(r6, &(0x7f0000000000)) [ 186.376546] audit: type=1800 audit(1591543850.097:39): pid=8695 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15817 res=0 15:30:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000400)=""/189, 0xbd}], 0x4, &(0x7f00000006c0)=""/210, 0xd2}, 0xfffffff8}], 0x1, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x840) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000140)={0x3, 0xb0, "678a4f4f0fd73740f2679e9daed7a7697a064c3c167407470a6952e8711ba78280aade475b4b8f20da0d2aeef78881832c01b1fb82afa038eb8a08e5ba77f08e935ad1055233f41fa13444e384f4e13acfb1af22fac7a6151912b2c6c9dccd21bf931a3678221795c2b00fac04dfc8208c478dcb6d92eafaeefe255116fe40a8dc139bd0f69898ce164aaef40cb51c19931c37107eee204d75eb124b7886183c1d70c6655885c949591a73ea3071fd1d"}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, 0x0}, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 186.726265] audit: type=1800 audit(1591543850.447:40): pid=8719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15840 res=0 15:30:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c8010000f8000000c8010000f8000000c8020000c8020000c8020000c8020000c80200000400000000000000000000004cc7872711511674c05009ff3488171900000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000736974300000000000000000000000006272696467655f736c6176655f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000e1ffffff000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000fe880000000000000000000000000001fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000068737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000d800000100000000000000000000000000000000000000000000000030006c327470000000000000000000000000000000000000000000000000000000000000000000000000020000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 15:30:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400e00, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000001c0)={0x0, 0x0, [0x2, 0x9, 0xfffffff9, 0xab, 0x0, 0x0, 0xffffffff, 0x122]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 186.827184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.905015] ip6_tables: ip6tables: counters copy to user failed while replacing table 15:30:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c8010000f8000000c8010000f8000000c8020000c8020000c8020000c8020000c80200000400000000000000000000004cc7872711511674c05009ff3488171900000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000736974300000000000000000000000006272696467655f736c6176655f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000e1ffffff000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000fe880000000000000000000000000001fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000068737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000d800000100000000000000000000000000000000000000000000000030006c327470000000000000000000000000000000000000000000000000000000000000000000000000020000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) 15:30:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x1) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226a9ff500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c00", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x801) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 187.032153] ip6_tables: ip6tables: counters copy to user failed while replacing table 15:30:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x1) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226a9ff500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c00", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x801) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 187.225232] audit: type=1804 audit(1591543850.947:41): pid=8741 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir042982808/syzkaller.94Qi5q/22/bus" dev="sda1" ino=15763 res=1 15:30:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) r1 = msgget$private(0x0, 0xd5) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/194) 15:30:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x1) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226a9ff500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c00", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x801) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) [ 187.596608] audit: type=1804 audit(1591543851.317:42): pid=8754 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir109633633/syzkaller.nCsE6w/27/bus" dev="sda1" ino=15840 res=1 [ 187.950502] audit: type=1804 audit(1591543851.317:43): pid=8755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir214819214/syzkaller.rYns7o/30/bus" dev="sda1" ino=15844 res=1 15:30:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400e00, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000001c0)={0x0, 0x0, [0x2, 0x9, 0xfffffff9, 0xab, 0x0, 0x0, 0xffffffff, 0x122]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:30:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r2, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000300)=0x80, 0x80000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000340)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000400)={0x80000001}, &(0x7f0000000440)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x400003f00) 15:30:52 executing program 5: socket$kcm(0x10, 0x5, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000140)="da3340f0ea0bc35bb929f21ec8ff7f000000040000211bb2e7bc6828f926bfc4ebfa8ed75b2c3d79cc7a73264df0f77d7c3a2589f07b3f8ff22ae0175fa34f2a", 0x40) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(0x0, 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 15:30:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xe, 0x1e, 0x6e, &(0x7f0000000580)="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"}) fallocate(r2, 0x0, 0x0, 0x47fff) 15:30:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) msgget$private(0x0, 0xd5) [ 188.460364] audit: type=1804 audit(1591543852.177:44): pid=8778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir042982808/syzkaller.94Qi5q/24/bus" dev="sda1" ino=15829 res=1 15:30:52 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x5d) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) setregid(0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=""/20, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x3) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000440)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) stat(&(0x7f0000000140)='./file1\x00', 0x0) 15:30:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000507000000000000eb0000000000dbd9227057ad6dc67609c288256bd6ee7c644b3e5fe2977070e13b01b650519fa8d43ba7d548266d6696fbb2297024975f6ff7f3700507734f4b7b51d85355f54db1ab79f7", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a001400ffffffffffff0000"], 0x40}}, 0x0) 15:30:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) [ 189.160565] nla_parse: 52 callbacks suppressed [ 189.160571] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.212830] audit: type=1804 audit(1591543852.937:45): pid=8802 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir042982808/syzkaller.94Qi5q/24/bus" dev="sda1" ino=15829 res=1 [ 189.247420] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:30:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000340)={0x38, 0x2, 0x0, 0x0, 0xc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/91, 0x5b}, 0xc}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/27) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)={0xa, {0xc, 0x1, 0x3f}}, 0xa) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000006c0)={0x9, 0x0, 0x5, 0x0, 0x4924924924927e2}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x8a043, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000001c0)={0x0, 0xc9, 0xfff, 0x7}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x128) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESHEX=r4, @ANYBLOB="2c728d6f746c6f3030303030303030313030d9f6756e406d86e75f6966318fe98515e6e6e3643d000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cd5ae49338eaea7ea951c5dcb0a7c01"]) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 15:30:53 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x5d) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) setregid(0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240)='overlay\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=""/20, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x3) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000440)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) stat(&(0x7f0000000140)='./file1\x00', 0x0) 15:30:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r0, @ANYBLOB="010300000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) syz_emit_ethernet(0x1d, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @empty, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 189.518143] audit: type=1400 audit(1591543853.247:46): avc: denied { write } for pid=8810 comm="syz-executor.1" name="task" dev="proc" ino=30966 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 15:30:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x81000000}, 0x0) [ 189.653583] audit: type=1400 audit(1591543853.247:47): avc: denied { add_name } for pid=8810 comm="syz-executor.1" name="8826" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 15:30:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) [ 189.754664] audit: type=1400 audit(1591543853.247:48): avc: denied { create } for pid=8810 comm="syz-executor.1" name="8826" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 15:30:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)={0x220, 0x23, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x52, 0xa, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid}, @typed={0x8, 0x10, 0x0, 0x0, @uid}, @typed={0xc, 0x94, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x68, 0x0, 0x0, @fd=r0}, @generic="69c0496481e096774532cc4102fd14d4dffb36dded9fc90b2b877e87471ca09285117092d60a073dd42b"]}, @generic="f0d049651a606f3d85643d26ad555d72507fe33d35d3c7bbbbe10e2ac5d1a1af", @generic="ae237ab1ec9913dddfbee7cb2ae41ff3b604d7027c40ace97ed8b4df3c9484b071e061503f0ad98dcfff644df222205bacecff9a1afb921e890b1ed1de2270d4a73ebd452353ecceed", @generic="7bc49e0a482bea461a", @nested={0x145, 0x10, 0x0, 0x1, [@generic="6b78a3f55da9810f497d05561bbfae1ecf6c083ccc9e7ce2853193f8c83dc71c1f49280e9fe256610a1a586012a825ca0664e3ca014567b7", @generic="59ac9b326b987e3ac5b2fb7417025572fc670ff2d88b4c97f2ed4707998797eb537abdf044045d242b39461186c8335e0ecddfa18a3ffe882add0d2e54a1689b347e7df209e59dfd8c421e7f07ac50ead706fbb42c23384adf68d2c9ff68a69b730738585f74790e77f8d5fc68ca15ef93b749f8766bd55d2a51e37dfa3c8cbe61249e4690bf760fe4746efd11688c614e41b23a7cfdfd914b6d983b082f75c028a481dbda333eaf9f74030eeb20f33f41664625de5a4fe4b3bbcc539171493aedff93204e0206de02c8e58f520931254fd5ca053aecea809f7d5907731e5cfec0e05b98300fa8609c", @typed={0x8, 0x45, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x60, 0x0, 0x0, @fd}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @typed={0x8, 0x68, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x220}, {&(0x7f0000000580)={0x10, 0x41, 0x800, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x2, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}], 0x48}, 0x8800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x4) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000001, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000140), 0x0, 0x8fc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000040)) [ 189.943420] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.952985] bridge0: port 1(bridge_slave_0) entered disabled state 15:30:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}], 0x3}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000280)={r4, 0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000002c0)={r4}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x3000004, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d756e69782c6163636573733d757365722c6163636573733d636cdef809c0a83d6a6dc0757fc402d0d669656e742c63616368653d66736361636865", @ANYBLOB="ec3eccb78a484c4b1c3bd98ecbb47e56a8dfe8813a2e2601d50f254ef79066a28ed787d82325885d5afa1bfdea8cb60303ee591ee8a80200000045b95e55b432d86279bf979ef6b0411f11938597aa8cad38de2d99ba6be1b0523b12b80fa629d97397356c354ed2e64abba0b9bb963310826fe776590c7d8101c3e62681c575b78b7b6c08bdb908d5ffffffff00000000be318d5775ccdc763f2e13fd4438b3e7921390daa737804c74776cb5a273996e19"]) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={0x0, 0x1000, 0x10}, &(0x7f0000000640)=ANY=[@ANYBLOB='enc=pkcs1hash=nhpoly130neon\x00\b\x00'/79], &(0x7f0000000c80)="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", &(0x7f0000000340)=""/16) 15:30:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) [ 190.163858] 9pnet: p9_fd_create_unix (8855): problem connecting socket: ./file0: -2 15:30:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r2) ioctl$int_out(r2, 0x0, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') preadv(r7, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x0) 15:30:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000100)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000000)="a2", 0x1}], 0x100001c4}}, {{&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0], 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(r5, r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/connector\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="009db5448cc121f7991c718db20640838b2f000000d222bcf67c80a7b579d7713d74d4bb7936ddd3698dc46a041a8f871ff665afaa385c4e8a43f33577d1a167d2de0b8202071ec2caa574bfeacb8c6363a6e55567ede29b11fe8be03ee67f2235a9d8ed493fdaea93af3eaca4a17a2e", 0x6f, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x4d) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="020000a43df3f0de1a1801", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x6c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x23}, 0x100}}, 0x1, 0x1}, 0x90) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 15:30:54 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) [ 190.274678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.295728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 15:30:54 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) exit_group(0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r0, @ANYBLOB="010300000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) syz_emit_ethernet(0x1d, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @empty, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20) r2 = socket(0x2, 0x803, 0xff) syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:30:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x1) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x64, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x8, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xd, 0xf989, "13b54eeaea82ed09c1"}, @sack={0x5, 0x16, [0x3, 0x3, 0x81, 0x3ff, 0x4]}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x5}, @mss={0x2, 0x4, 0x200}, @mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x3, @multicast2, 0xfffe, "e259e01836"}, @fastopen={0x22, 0xd, "42be17d7b40ab6465638de"}, @nop]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c3e011000090580000"], 0x0) 15:30:54 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x280, 0x1, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 15:30:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007", 0x11) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x20048005}], 0x1, 0x0) 15:30:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x130, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast1}}, {0x14, 0x4, @remote}}}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x74, 0x0, [0x9]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="36660f3a0e6bfe000f005c00bad10466b830eb000066ef640f01c8f30fc7b79572b809008ee80f20c06635000000200f22c0dd7b0bba4000b89e00efb800008ed8", 0x41}], 0x1, 0x40, &(0x7f00000003c0), 0x0) 15:30:54 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) socket$pppoe(0x18, 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$RTC_UIE_OFF(r4, 0x7004) 15:30:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 15:30:54 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x1, 0x1, 0x1f, 0x2, 0x0, 0x6, 0x4, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x7}, 0x1000, 0x7fffffff, 0x5, 0x2, 0x100000001, 0x0, 0xffff}, 0x0, 0x10, r4, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x0, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000340)={0x0, 0x100000, 0x1, 'queue1\x00', 0x1f}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) getgid() 15:30:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) [ 190.667355] audit: type=1800 audit(1591543854.387:49): pid=8915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15829 res=0 15:30:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x5292c2, 0x32) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="78a12a11511be97eddd2eb944ee683869d31e86c9f126e63a87412feedbdfc588b5998f4da27cefd655a22cfa9ab04d628da0b59fccc68db0d43144148012bf7"], 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0), 0x10, 0x0}}], 0x1, 0x804) ftruncate(r1, 0x8200) r4 = open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = accept(r4, &(0x7f0000000980)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000a00)=0x80) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="030628bd7000ffdbdf2510000000ff0034004d1fe223b1e2d0629dbe63000c004c000fac0f000e000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x8850) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000240)={0x0, "a509c5bd2bf7e1a29c4a00bf64ebe72ea36750a3e73eb62f6c55d8dbe854d8cf", 0x1, 0x20, 0x6, 0x3, 0x0, 0x0, 0xfffffffe, 0x400}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 15:30:54 executing program 5: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200004d1e, 0x800007c}, 0x0, 0x0, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) arch_prctl$ARCH_GET_CPUID(0x1011) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1}, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000004c0)={0x37, 0x1b, 0x12, 0xd, 0x0, 0x0, 0x6, 0x137, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x18c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eaba11f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4608}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74d4870c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6edacb8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14dd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73f4930a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa4096}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc02f3a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66930173}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38fdd5c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd74f43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21744924}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb00a92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6694bbf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x126691c8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x176b995b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7b5527}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x91}, 0x20044c44) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:30:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000180)=""/70) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x400000) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000280)={@empty, @empty, @loopback}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x40, 0x7, 0xfffffff9, 0x100, 0x234, 0x5}, 0x1c) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) lseek(r6, 0x1f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)="21bca274769e620a2d34fa0095e0612687ec30310d4e02a90200000500000000000000b579a782c270146d0e0206e700a8c63cd7dcc6760253ef", 0x3a, 0x5}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303030342cd7ad64014f23b5ad72616e736d7574653d65787433002c00"]) 15:30:54 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x280, 0x1, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 190.780165] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 190.805283] audit: type=1800 audit(1591543854.397:50): pid=8915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15829 res=0 15:30:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x280, 0x1, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 15:30:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:54 executing program 5: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200004d1e, 0x800007c}, 0x0, 0x0, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) arch_prctl$ARCH_GET_CPUID(0x1011) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1}, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000004c0)={0x37, 0x1b, 0x12, 0xd, 0x0, 0x0, 0x6, 0x137, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x18c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eaba11f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4608}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74d4870c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6edacb8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14dd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73f4930a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa4096}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc02f3a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66930173}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38fdd5c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd74f43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21744924}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb00a92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6694bbf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x126691c8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x176b995b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7b5527}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x91}, 0x20044c44) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:30:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x42, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x3ff, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) 15:30:55 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x280, 0x1, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 15:30:55 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10) pipe2(&(0x7f0000000280), 0x80000) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x1}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000100)) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept4$nfc_llcp(r1, &(0x7f0000000500), &(0x7f0000000080)=0x60, 0x180800) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x13, 0x0, 0x9}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) 15:30:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:55 executing program 5: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200004d1e, 0x800007c}, 0x0, 0x0, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) arch_prctl$ARCH_GET_CPUID(0x1011) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1}, 0x40002002) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000004c0)={0x37, 0x1b, 0x12, 0xd, 0x0, 0x0, 0x6, 0x137, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x18c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eaba11f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4608}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74d4870c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6edacb8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14dd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73f4930a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa4096}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc02f3a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66930173}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38fdd5c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd74f43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21744924}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb00a92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6694bbf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x126691c8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x176b995b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7b5527}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x91}, 0x20044c44) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:30:55 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0xfffffffffffffffa}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x9, 0xffff, 0x3, 0x671}) 15:30:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x18010}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000440)=0xfff, 0x4) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000533800000010000507000200"/25, @ANYRES32, @ANYBLOB="0000f015010000001815120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) getpeername$netrom(r3, &(0x7f00000001c0)={{0x3, @default}, [@default, @bcast, @bcast, @netrom, @null, @default, @bcast, @null]}, &(0x7f00000002c0)=0x48) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a26, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) 15:30:55 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x280, 0x1, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 15:30:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f0000000140)=""/52, 0x34}, {0x0}], 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000002c0)={0x0, 0x8001}) sendto$l2tp6(r1, &(0x7f00000003c0)="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", 0xfb, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x5, @remote, 0x5, 0x2}, 0x20) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000500)}, {&(0x7f0000000300)="b8698a8128ccc43137e23f48c6d2520e767384e8e8bf3f29844b56765d57dc30e5f33728eb378feacce9f48a9235b7c0a221", 0x32}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0xffffffffffffffff, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYRESHEX, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 15:30:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6207c43e}, 0x0, 0xfffffffffffffffd}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x208e19b) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x4, r2, 0x0, 0x0) r3 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='+\x00', r2) keyctl$setperm(0x5, r3, 0x10200000) fcntl$dupfd(r1, 0x0, r0) close(r1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0x40086602, &(0x7f00000003c0)) 15:30:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000002006, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xfffffd2d) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x110}, 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000540)=""/238) unlink(&(0x7f0000000040)='./file0\x00') sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000007000000000000000000001414bb00000000000000000200010000000000f6000901000000000000000000000000000000000000196527510fa6387cf6cc084f7eb27bb6a1f13c7a6041ff8bc947450cb581149e9cae4629ed9555b5a3e0340f7e63c0d2cba4b608c4"], 0x38}}, 0x4) 15:30:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x18010}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000440)=0xfff, 0x4) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000533800000010000507000200"/25, @ANYRES32, @ANYBLOB="0000f015010000001815120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) getpeername$netrom(r3, &(0x7f00000001c0)={{0x3, @default}, [@default, @bcast, @bcast, @netrom, @null, @default, @bcast, @null]}, &(0x7f00000002c0)=0x48) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a26, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) 15:30:56 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="88dd4e10e1f5e0d7485e4924d0db7981e7e3f2b769553fe89e2694d608da848e65e3deb4652403638d5c717b78a32cd20f957c3e7fdb9b2abdfe16a813c87e8c9c76ae0f430f520f323cd260ecfba8d5370b12dad263260a47786b7f3fc9ff05079a08d2a549d5ed36b79e5b175a32941fc5b7246a941ade6af793d5ca1adf1137", @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) 15:30:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x4, {{0x7, 0x1, 0x2, r1}}}, 0x28) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000004c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48", 0x4d}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001600)='/dev/ptmx\x00', 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r3, 0xff}, &(0x7f0000000380)=0x8) [ 192.588855] syz-executor.3 (8978) used greatest stack depth: 23840 bytes left [ 192.709356] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.722906] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:30:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:56 executing program 0: chdir(&(0x7f0000000380)='./bus\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x7) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000180)={0xe2, 0x1}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={r9, 0xe}, &(0x7f0000000140)=0x8) 15:30:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x483c, "9ab4234bd1695aef955974f417348965f0c01dafa611be45cc4fd76757821fd2", 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) [ 193.083389] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:30:56 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff647e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x10, r1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYBLOB="00012abd7000fddba7ea1f3268250100000000000000bf3100ab527b172d070f073d7e2fb126bc7b24791bb0b960001000000000000059775d1bd37886ae99f930adc7a226b46c71c8974834355ebbaa5e19beb8cf35ebea51fd1a544dd40a1bd8a777ae8dc869d454406b433c7bf1adc1d4617888"], 0x30}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) bind$phonet(r4, &(0x7f00000001c0)={0x23, 0x7, 0x1, 0x81}, 0x10) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000280)={0x3, 0x1f, 0x26e, 0x0, 0xb, "db737d40750f73a9"}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x1ff}}, 0x18) [ 193.159773] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.200307] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.216081] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.246911] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.282083] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:30:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8) 15:30:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f14e33e640f16cb3ec11200f30f6ff02e362e660f01dfe671f30f090f8770b1f2e00736dac1", 0x26}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000003c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003006cb6c5a81783ed760a32567f87000000b8e5"], 0x18}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=""/192, &(0x7f00000000c0)=0xc0) 15:30:57 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00006da83647a3d2eaf1990f4e2a6dae9f23b0bcf91b8dc8daf14a6a93d27cf220138d38d43a1499aa233ccd6fc36db949a080c8de728720732feed2d0b24bdf045b5d1d471ee3d86f84b1b3f469a5f995d484c778066ada0572543cfcf664ecb39b96d0ab5695dd42aca467793350ad5fcfd1427d3edeb1294322bb8b159f4d2b4090e5957b010efb566b81339c6680a6e9a716283b95859a879e0e2f09ca69c3508d9a78f8f53302f28a70ead111b075468b4aad5b0ee58d7632e650ee2ad41b1d4e418c53d282706acdcf6465cb83df", @ANYRES32=r4, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r8, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r6], 0x7, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5000021}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xfd8a) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000480)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x183a22) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x88c3, 0xc, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2, 0x1b}, 0x100, 0x0, 0x5, 0x6, 0x2, 0x8883, 0xb4}, 0x0, 0x0, r1, 0xb) 15:30:57 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000a80)='\\\xba\x140D\xf8systemem0md5sum$\x00`\xfa\x90$\x1f\x8c3\xa1\xa8k\x1e\xca9\xb2\xbb\b\x8f\x94>\xb8\x0f\x92r\xb4\\\xbd\xc0\xc0\xa5\xf8;|\x16-\xbcR\x0f\x00FVL/3w\x1d\x1dTRG\xd37z\xcbS\x82\x7f\xac;Be!\x84Q\xb7\xdc\xb6\xf0\xc6\x9e\xb0\xa6\xf4\x88Tj\b\x00\x00\x00\xc7\xd58\xfd\xb6\x00\x80\xf9\xd7?\xc0\x9a\x9b\xba\x0f\x01\x96\xa8\x0f\x11\x1c/~O\x92\xd8D\x90\xf7\x9aW\xf3\x19tH\\\x92\xb3\xe3\xff\xcb@\xd4\xd6%\xea\xe7)\x81\xdc\x91T\x85\x14\x84\xe4\xae\xe2\xd8\xf6S\xb5\xbb\x9d\xa9Ek\x1az\x7fa\x9cY\xd2zIU\xe4\b\xc6Q\x1a\xcbr\x191\x19\xd70\x17\xd9qD\xaa\x83\x1d\x9ei\x8c\x83\x9eVa$\xa1\x0eEP\x03\xee\xea\x9e\xce\xfac\xce9\xe8\r\x17\xf0\xf4\x89B[\xfc\xe3?\xbe\xc4\xc0{\x1e\xc5g\xc7\x12\xf6?\f\xdd\xec\xfc\x1c\xb3Xc\xc0\fPm~$M>A\x8a\xd6\x1d\xd8\xe4\xf1?\xea\x1a\x15\x13J\xe3\"\x87\x9b\x02\x7f\x13\tF', 0x0) r2 = memfd_create(&(0x7f0000000140)='$.&I\xc8\xe4d\x95\xc6`l\xddQ\xe3\xf3R\x126X\n@u\x82\x14\t\x17\xe8\x036\xe1\x9b\xc8\x05', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x8, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') 15:30:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000002006, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xfffffd2d) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x110}, 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000540)=""/238) unlink(&(0x7f0000000040)='./file0\x00') sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000007000000000000000000001414bb00000000000000000200010000000000f6000901000000000000000000000000000000000000196527510fa6387cf6cc084f7eb27bb6a1f13c7a6041ff8bc947450cb581149e9cae4629ed9555b5a3e0340f7e63c0d2cba4b608c4"], 0x38}}, 0x4) 15:30:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000002006, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xfffffd2d) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x110}, 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000540)=""/238) unlink(&(0x7f0000000040)='./file0\x00') sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000007000000000000000000001414bb00000000000000000200010000000000f6000901000000000000000000000000000000000000196527510fa6387cf6cc084f7eb27bb6a1f13c7a6041ff8bc947450cb581149e9cae4629ed9555b5a3e0340f7e63c0d2cba4b608c4"], 0x38}}, 0x4) 15:30:57 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff647e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x10, r1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYBLOB="00012abd7000fddba7ea1f3268250100000000000000bf3100ab527b172d070f073d7e2fb126bc7b24791bb0b960001000000000000059775d1bd37886ae99f930adc7a226b46c71c8974834355ebbaa5e19beb8cf35ebea51fd1a544dd40a1bd8a777ae8dc869d454406b433c7bf1adc1d4617888"], 0x30}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) bind$phonet(r4, &(0x7f00000001c0)={0x23, 0x7, 0x1, 0x81}, 0x10) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000280)={0x3, 0x1f, 0x26e, 0x0, 0xb, "db737d40750f73a9"}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, 0x1ff}}, 0x18) 15:30:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) 15:30:58 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x40, 0x9}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") r4 = accept(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = open(&(0x7f0000000500)='./file1\x00', 0x0, 0x108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00006da83647a3d2eaf1990f4e2a6dae9f23b0bcf91b8dc8daf14a6a93d27cf220138d38d43a1499aa233ccd6fc36db949a080c8de728720732feed2d0b24bdf045b5d1d471ee3d86f84b1b3f469a5f995d484c778066ada0572543cfcf664ecb39b96d0ab5695dd42aca467793350ad5fcfd1427d3edeb1294322bb8b159f4d2b4090e5957b010efb566b81339c6680a6e9a716283b95859a879e0e2f09ca69c3508d9a78f8f53302f28a70ead111b075468b4aad5b0ee58d7632e650ee2ad41b1d4e418c53d282706acdcf6465cb83df", @ANYRES32=r4, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r8, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r6], 0x7, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5000021}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000854}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xfd8a) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000480)) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f0000000040), 0x8, r5, 0xb}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) gettid() r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x183a22) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x48], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x88c3, 0xc, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2, 0x1b}, 0x100, 0x0, 0x5, 0x6, 0x2, 0x8883, 0xb4}, 0x0, 0x0, r1, 0xb) 15:30:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) 15:30:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffffffffffd03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000080)) close(r1) 15:30:58 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup2(r0, r1) 15:30:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) 15:30:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f14e33e640f16cb3ec11200f30f6ff02e362e660f01dfe671f30f090f8770b1f2e00736dac1", 0x26}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000003c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003006cb6c5a81783ed760a32567f87000000b8e5"], 0x18}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=""/192, &(0x7f00000000c0)=0xc0) 15:30:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x44200, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/76, 0x4c}], 0x1}, 0x40002002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000013c0)=r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r6) preadv(r5, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/173, 0xad}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, 0xb8) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="280000001e00090200934a723bbd70b2", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="d996b4e55a3ccfacd14bd850078fcc"], 0x28}}, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) close(r0) 15:30:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:30:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x6e7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x0, 0xb0}, 0x0) socket$inet6(0xa, 0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x1, 0x41, 0x3, 0x3, 0x0, 0x6, 0x1000, 0xfffffffd, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x1) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38104, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10000000}, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8eb46, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x8001) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2c, 0x2, @tid=r0}) 15:30:58 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101, 0x0, 0x0, 0x5a6690ad8bcd0478}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000080)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000680)) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) eventfd2(0x7fffffff, 0x80001) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) 15:30:58 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x7, @loopback, 0x1ff}], 0x1c) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 15:30:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2, 0x1010, r3, 0x82000000) r4 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90Y1\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x40ee1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) write(r0, &(0x7f0000000000), 0x52698b21) 15:30:58 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:30:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="0f01b4070066b9a50b000066b80600000066ba000000000f3065f3af0f090f01c8362e0f71d7072626f30fc772b366b9800000c00f326635010000000f30c40266b9590900000f32", 0x48}], 0x1, 0x1a, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) socket$inet(0xa, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x7}, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x4, 0x4, 0xfffffffffffffffd], 0x0, 0x100900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc02a1, 0x0, 0x0, 0x6, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f000004b000/0x3000)=nil, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 195.224912] print_req_error: I/O error, dev loop0, sector 0 15:30:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000340)=0xdc0c, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 15:30:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:30:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x2, "5ff0e0b2b8a278018c19792ca48a5633174457326d9159aa4900c5ca895e3ba4", 0x0, 0x1}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="64d16201dcbdc3d2fd599660ff42eb740afe9a0c06031b78e24fb24e5296e0b3aee730ee17b56f8564d333d9d7793c58f12c2f0036932f3e871ae6d65e6e26c267a4513705722c068b01c2", 0x4b}, {&(0x7f0000000240)="7bc583e9e0df0d78dae4b9f13b0348d46eff494793cc27fd248c926ef4a53b4afb724874efb1979c5b6a196107f07f2cffba1ceb173c4c1d161611d08e959c4d7cc81110668229814a280e5e63274b215d3d6e8b74a6683b057a9c2f285b23623276db5c5ffbdd91a6ea48e33081c95f834b5c1c7c93b71281ab99538516dcea3b34f9e86a2e7ca6c5188d7a1be740ff067ed2c8a8642d58154fa703dbdb7caec6d1f2bef91ee65f43277ae662b368e00bebde2fb763c8c6769120872740bee4c3ae9a3db804c383727366ef6493495b6f45884fd1aee658c09bd1219cf680705ece98", 0xe3}, {&(0x7f0000000180)="07c4e2c6e84e0047db05be39885169625829f2f312c1564f24e6faa6cc8452dd542a0f4fd2050ecc424fdff15e128c6a45c1ba6f723d1e3cc2dc6bba5d5c202e012bbd8bd6b9736018152641b9330c46efc62287cb263e87fa5de1ff95a6de04bb455cbf3dc997e1a69b01f785f815c8cdb635bfb2414da9d174872637", 0x7d}], 0x3, 0x7ff) 15:30:59 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:30:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x9) 15:30:59 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101, 0x0, 0x0, 0x5a6690ad8bcd0478}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000080)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000680)) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) eventfd2(0x7fffffff, 0x80001) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) 15:30:59 executing program 3: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES16], 0x4240a2a0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x29, @empty, 0x4e24, 0x0, 'fo\x00', 0x1, 0xffff, 0x1b}, 0x2c) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = accept$packet(r2, 0x0, &(0x7f0000000500)) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000580)=0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/188, 0xbc}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x121) sendto$inet(r1, &(0x7f00000001c0)="eb9db7c27e7d428bf77e54d257a89f9f1a1f1db9788fe1056f586a98953e6d808b487fa34c92bdb03dbd40fe41a621960d2765407094d94b5137c1b49c920d94baae385629c2236399953545536f83558520a863b99d821dc3a08d5be54e58c3d13b9796300a62a57c81f291d8e9c50a30c3379b6ed778f8ad4b9105a7d6b06bf93c814f2d259f031d0dd056fc8336c55c", 0x91, 0xbc324cd1b6e65439, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) 15:30:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:31:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:31:00 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:31:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="0f01b4070066b9a50b000066b80600000066ba000000000f3065f3af0f090f01c8362e0f71d7072626f30fc772b366b9800000c00f326635010000000f30c40266b9590900000f32", 0x48}], 0x1, 0x1a, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7115}, 0x100) socket$inet(0xa, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x7}, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x4, 0x4, 0xfffffffffffffffd], 0x0, 0x100900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc02a1, 0x0, 0x0, 0x6, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f000004b000/0x3000)=nil, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:31:01 executing program 3: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES16], 0x4240a2a0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x29, @empty, 0x4e24, 0x0, 'fo\x00', 0x1, 0xffff, 0x1b}, 0x2c) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = accept$packet(r2, 0x0, &(0x7f0000000500)) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000580)=0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/188, 0xbc}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x121) sendto$inet(r1, &(0x7f00000001c0)="eb9db7c27e7d428bf77e54d257a89f9f1a1f1db9788fe1056f586a98953e6d808b487fa34c92bdb03dbd40fe41a621960d2765407094d94b5137c1b49c920d94baae385629c2236399953545536f83558520a863b99d821dc3a08d5be54e58c3d13b9796300a62a57c81f291d8e9c50a30c3379b6ed778f8ad4b9105a7d6b06bf93c814f2d259f031d0dd056fc8336c55c", 0x91, 0xbc324cd1b6e65439, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) 15:31:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0xfff, @local, 0xffffffff}}}, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)={0x800, 0x4, 0x4, 0x10, 0xfffffffe, {}, {0x2, 0x8, 0x2d, 0x14, 0x85, 0x7d, "ba7b4fe5"}, 0x4, 0x4, @offset=0x1, 0x6fbf, 0x0, 0xffffffffffffffff}) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000040)) 15:31:01 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101, 0x0, 0x0, 0x5a6690ad8bcd0478}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000080)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000680)) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) eventfd2(0x7fffffff, 0x80001) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) 15:31:01 executing program 1: r0 = socket(0x4, 0x2, 0xfffffffc) write(r0, &(0x7f0000000200)="240000004e0001000000f4f9002304000a04f511080008000201009f0800028001000000", 0x24) 15:31:01 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 15:31:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x1}, &(0x7f0000000040)) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) waitid(0x2, r3, &(0x7f0000000080), 0x1, &(0x7f0000000380)) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x62, 0x6181ddca, 0x0, 0x4, 0xb, 0x10, "c64e7e4835afba7a76ac3c07ec2433346469881172097e59dfe5db43cced132ab60c88f6814dd24d9b26e547d207bffc9ed13c583875bbb2a80240ccc2e8021c", "0342ddf6406968d474dbf98b4b1f068113bd92511607cd38bf1c9b7421331e21b91971554ee0fca10ec285bf6e55c36de5add55cc7daa9e249f8b083ff8ddc23", "0bc9af16f4087ff1dd29937e63ad32bc0e3837c65a4a095706106fc6603a2f3a", [0x100000001, 0x6]}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 15:31:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000100)=""/134) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000000)={0xffffffff, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$cgroup_int(r2, &(0x7f0000000200)=0x1000000, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000340)={{0x2, 0x4e20, @loopback}, {0x6, @broadcast}, 0x8, {0x2, 0x4e24, @loopback}, 'vcan0\x00'}) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$NBD_SET_BLKSIZE(r8, 0xab01, 0x6) 15:31:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x1}, &(0x7f0000000040)) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) waitid(0x2, r3, &(0x7f0000000080), 0x1, &(0x7f0000000380)) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x62, 0x6181ddca, 0x0, 0x4, 0xb, 0x10, "c64e7e4835afba7a76ac3c07ec2433346469881172097e59dfe5db43cced132ab60c88f6814dd24d9b26e547d207bffc9ed13c583875bbb2a80240ccc2e8021c", "0342ddf6406968d474dbf98b4b1f068113bd92511607cd38bf1c9b7421331e21b91971554ee0fca10ec285bf6e55c36de5add55cc7daa9e249f8b083ff8ddc23", "0bc9af16f4087ff1dd29937e63ad32bc0e3837c65a4a095706106fc6603a2f3a", [0x100000001, 0x6]}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 15:31:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x92202, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/84, 0x54}], 0x4, 0x7) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000100)=0x1000) 15:31:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0xfff, @local, 0xffffffff}}}, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)={0x800, 0x4, 0x4, 0x10, 0xfffffffe, {}, {0x2, 0x8, 0x2d, 0x14, 0x85, 0x7d, "ba7b4fe5"}, 0x4, 0x4, @offset=0x1, 0x6fbf, 0x0, 0xffffffffffffffff}) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000040)) 15:31:01 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) 15:31:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x4e8, 0x108, 0x348, 0x108, 0x0, 0x0, 0x318, 0x418, 0x418, 0x418, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @remote, [], [], 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4=@multicast2, [], @ipv6=@mcast2}, {@ipv4=@empty, [], @ipv6=@dev}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@dev}], 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r2 = socket$inet6(0xa, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) 15:31:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000002c0)="ba4300ecf32ef0f750b50f012a163066b969025eea0f3266b99f0000400f3266654757b8ec111000b1b101c10f23c80f21f866350800a0000f23f8b82b000f20d86635080000000f22d80f01bd0050", 0x4f}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15:31:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f0000000200), 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000000)={0x0, 0x5, 0x1f}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x0) [ 198.520858] ip6_tables: ip6tables: counters copy to user failed while replacing table 15:31:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xe0c, 0x0, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5}, 0x81, 0x7f, 0x4, 0x200, 0x8, 'syz0\x00', "96c619ea5b739a7b9c95cc06889fd5f9c4e136ead49a300841f82bc24c9c86bd", "bfdaa98c68e3dba494ce50477dd7b0bff3a119c6cc6882d2f9831d653809390f", [{0x1f, 0x1ff, {0x3, 0x5}}, {0x4, 0xa54, {0x0, 0x8001}}, {0x3, 0x9, {0x2, 0x80000001}}, {0x3fa5, 0x401, {0x1, 0xffffff5a}}, {0x53, 0x2b21, {0x0, 0x3}}, {0x4, 0x9, {0x3, 0x2}}, {0x66aa, 0x81, {0x0, 0xfffffff7}}, {0xfffa, 0x40}, {0x7, 0x7f, {0x0, 0x8001}}, {0x6, 0x1, {0x0, 0x81}}, {0x1b, 0x6, {0x3, 0x9}}, {0xff, 0x41f2, {0x0, 0x1ff}}, {0x8, 0x0, {0x2, 0x40}}, {0x7, 0xffad, {0x2, 0x3}}, {0x4e, 0x7fff, {0x0, 0x8}}, {0x900, 0x6, {0x1, 0xfff}}, {0x1f, 0x1, {0x1, 0x64a5}}, {0x1, 0x6, {0x2, 0x7fff}}, {0x1, 0x0, {0x1, 0x2}}, {0x1, 0xfffb, {0x0, 0x1}}, {0x8, 0xd62, {0x0, 0xa0f}}, {0x3, 0x1000, {0x3, 0x3f}}, {0x4, 0x1, {0x0, 0xde}}, {0x3, 0xf000, {0x1, 0x6}}, {0x0, 0x325d, {0x3, 0x82a9}}, {0x7, 0x1f, {0x3, 0x100}}, {0x1, 0x9, {0x3, 0x6}}, {0x978, 0x2, {0x1, 0x4}}, {0x7, 0x101, {0x0, 0x4}}, {0x80, 0x30, {0x0, 0x6}}, {0x0, 0x9, {0x1, 0xfffffff8}}, {0x6, 0x8, {0x2, 0x8}}, {0x3f, 0x433, {0x0, 0x10000}}, {0xfffe, 0x4, {0x3, 0x6}}, {0xbe5, 0x0, {0x2, 0x6}}, {0x101, 0x800, {0x1, 0x7}}, {0x0, 0x1, {0x2, 0x6}}, {0x7, 0x0, {0x0, 0x5}}, {0xf800, 0x1, {0x1, 0x7f}}, {0x9, 0x401, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x7f}, 0x5, 0x1f, 0x2edc, 0xfffa, 0xe, 'syz1\x00', "35820c05b0335aa2462ef0722703198ad76787126dd9ed327c60a1ed43fa1093", "e7860f04b0b158906e6f1a5898b23b11f2c20112a3b0cfaf095b18451d34fcb2", [{0x400, 0x833f, {0x3, 0xa13}}, {0x54, 0x8, {0x2, 0x6}}, {0x1, 0x100, {0x1, 0x10001}}, {0x3, 0x8, {0x1, 0x7}}, {0x95f, 0x5fb, {0x0, 0x5}}, {0x8, 0x2, {0x25d7bb1234f6cb24, 0xca}}, {0x0, 0xebb, {0x0, 0x4}}, {0x3, 0x4, {0x3, 0x4}}, {0x2, 0x3f, {0x1, 0xffffffff}}, {0x27, 0x4d18, {0x3, 0xac}}, {0x3, 0x464, {0x3, 0x40}}, {0x1ff, 0x5d9f, {0x2, 0xe5fb090}}, {0xf800, 0x1, {0x2, 0x5}}, {0x3, 0x6, {0x1, 0x7}}, {0x6, 0x5, {0x3, 0x200}}, {0x6, 0xfe00, {0x2, 0x8}}, {0x200, 0x80, {0x2, 0x80000000}}, {0x1, 0x2, {0x1, 0xffff}}, {0x8, 0x6, {0x3, 0x4}}, {0x4, 0x20, {0x0, 0x3}}, {0x401, 0x4, {0x0, 0x6}}, {0x5, 0x7827, {0x2, 0x8000}}, {0x40, 0x7, {0x1, 0x2}}, {0x3, 0x3, {0x2, 0x4}}, {0x40, 0x5, {0x2, 0x400}}, {0x8, 0x2, {0x3}}, {0x4, 0x2}, {0x3ff, 0x1, {0x0, 0xb2}}, {0x8, 0x8000, {0x3, 0x7}}, {0x7f, 0x0, {0x1, 0x4}}, {0xfe01, 0x4, {0x2, 0x1}}, {0x400, 0x7, {0x3, 0x1ff}}, {0x0, 0x1, {0x1, 0x7}}, {0x9, 0x3, {0x1, 0x4}}, {0x800, 0x6f3, {0x1, 0xe59}}, {0x1, 0x6, {0x2, 0x3}}, {0x5c43, 0x6, {0x1, 0x4}}, {0x3, 0x9, {0x0, 0x6}}, {0x1, 0x3, {0x0, 0x1}}, {0xde, 0xfe, {0x0, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x1000}, 0x8, 0x0, 0x2, 0x7, 0x24, 'syz1\x00', "66748640554ed41eb142893a8feb2bb2a4adca8efa6689b62296e12d5948c18b", "60be73f5c60361fc958cd5f66627808422b56ef8f9d322f0acf6f1f737683827", [{0x4, 0x101, {0x1, 0xff}}, {0x20, 0x8001, {0x2}}, {0xca, 0x7fff, {0x0, 0xfffffffd}}, {0x81, 0x5, {0x2, 0x1}}, {0x8001, 0x7fff, {0x3, 0x7}}, {0x9, 0x2, {0x2, 0x4}}, {0x4, 0x8001, {0x3, 0x10000}}, {0x7, 0x9, {0x2, 0x6}}, {0x1, 0xfffb, {0x3, 0x3}}, {0x6, 0x4, {0x2, 0x8000}}, {0x0, 0xdb06, {0x0, 0x4}}, {0xc000, 0xfff7, {0x3, 0x3}}, {0x1, 0x0, {0x1, 0x7fffffff}}, {0x2000, 0x9, {0x3, 0x3}}, {0x81, 0x40}, {0x1, 0x6, {0x1, 0x1fd6}}, {0xfff, 0x0, {0x3, 0x1f}}, {0x9, 0x8, {0x2, 0x1}}, {0xb2f9, 0x7, {0x1, 0x9}}, {0x1, 0x5, {0x1, 0x4}}, {0x9, 0x3, {0x2, 0x6}}, {0x3f, 0xfffc, {0x1, 0x400}}, {0x1, 0x45a, {0x0, 0x5ecadb0a}}, {0x2, 0x401, {0x1}}, {0x4, 0xfffc, {0x3, 0x9}}, {0x7, 0x2d, {0x0, 0x191f}}, {0x3, 0xff, {0x3, 0x2e}}, {0x7ff, 0x3ff, {0x1, 0x8}}, {0x8, 0xe5, {0x1, 0x40}}, {0x0, 0x2, {0x1}}, {0x0, 0x9, {0x3, 0xfffffe01}}, {0x6, 0x97, {0x1, 0x50a7}}, {0x2, 0x0, {0x3, 0x8}}, {0x6, 0x7, {0x3, 0x5}}, {0x131, 0x0, {0x0, 0x401}}, {0xf68b, 0x6, {0x1, 0xf3f}}, {0x0, 0x808, {0x3, 0x4}}, {0x3, 0x6, {0x0, 0x80}}, {0x7, 0x0, {0x1, 0x5}}, {0x8, 0x6, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x7, 0x8, 0x9, 0x5, 0x2, 'syz0\x00', "b88d9358913c70e0aaf8339c7f7d4d75b9f0ea5b7d8868580e5358056949dd6d", "25224565db131efdd00190602a59fca4d92724347fa968bf9969952e79ec5810", [{0x7, 0x40, {0x0, 0x8}}, {0x7f, 0x1, {0x2, 0x4}}, {0x6, 0x466, {0x1, 0xffff}}, {0xa88e, 0x1, {0x2}}, {0x0, 0x8001, {0x0, 0x10001}}, {0x3, 0x7f, {0x0, 0x3e5}}, {0xff80, 0x400, {0x3, 0x6}}, {0x800, 0x8, {0x3, 0x10000}}, {0x4, 0xffff, {0x3, 0xfffffffb}}, {0x0, 0x19, {0x0, 0x5}}, {0x6, 0x4, {0x1, 0x5}}, {0x101, 0x7ff, {0x2, 0x4}}, {0xfffa, 0x9, {0x1, 0x661}}, {0xa170, 0x8000, {0x1, 0x7f}}, {0x6, 0x8, {0x3, 0x3f}}, {0xa8, 0xd2e8, {0x3, 0x1f}}, {0x3, 0x1, {0x1, 0xfc89}}, {0xf95, 0x94, {0x3, 0xce4}}, {0x6, 0xf8, {0x1, 0x6}}, {0x7, 0xfff, {0x2, 0xfffffffa}}, {0x7fff, 0x7, {0x3}}, {0x5, 0x1, {0x3}}, {0x8001, 0x9, {0x3, 0x80}}, {0x5, 0x3, {0x2, 0x1ff}}, {0x8, 0x3, {0x3, 0x9}}, {0x1, 0x3, {0x0, 0x9}}, {0x3, 0x9, {0x0, 0x8}}, {0x7f, 0x2, {0x0, 0x7ff}}, {0xfc64, 0x3ff, {0x1, 0x400}}, {0x400, 0x7, {0x2, 0xc2f2}}, {0x5, 0xa62e, {0x1, 0x7}}, {0x3ff, 0x1, {0x0, 0x2}}, {0xdcfa, 0x1, {0x2, 0x200}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x9, {0x1, 0x101}}, {0x3a47, 0x0, {0x3, 0xe2}}, {0x1c00, 0x400, {0x0, 0xffffffff}}, {0x5, 0x9, {0x2, 0x4}}, {0x1000, 0x101, {0x1, 0xffffff7f}}, {0x3, 0xfff7, {0x1, 0xbd}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x40, 0x7, 0xe, 0x9, 0x6, 'syz0\x00', "873289e12f4841122e01478f27411223a2c594b6c0f4b27892e38c42859293cc", "8efc36dfc90c26929f577a11532e345d098b6d4c8e5b1fa5b597fb4fc40d0f2b", [{0x8001, 0x100, {0x0, 0x393}}, {0xff2e, 0x3, {0x1, 0x5}}, {0x2, 0x5, {0x2, 0x6}}, {0x4004, 0x7ff, {0x0, 0x5}}, {0x200, 0xf05f, {0x2, 0x6}}, {0x7, 0xef, {0x2, 0x2c}}, {0x2, 0x1000, {0x0, 0x2}}, {0x4, 0x8, {0x0, 0x572}}, {0x2, 0x7, {0x0, 0x7}}, {0xf800, 0x1, {0x2, 0x1}}, {0x6, 0x3}, {0x4, 0x3ff, {0x2, 0x80}}, {0xfd3, 0x2, {0x3, 0x4}}, {0x400, 0xf872, {0x1, 0x2}}, {0x8, 0x8, {0x2, 0x1}}, {0x6, 0x8, {0x2, 0x6}}, {0x6, 0x2, {0x2, 0xbfe9}}, {0x1, 0x3, {0x3, 0xa31}}, {0x1, 0x8, {0x3, 0x800000}}, {0x85, 0x1f56, {0x2, 0xff}}, {0x2, 0x21fa, {0x1, 0x6}}, {0x20, 0xfe82, {0x2, 0x8}}, {0x8, 0x4, {0x0, 0x8}}, {0x3, 0x7ff, {0x3, 0x1d7}}, {0x8, 0x40, {0x1, 0x9}}, {0x3f, 0x0, {0x2, 0x1}}, {0x3, 0x2, {0x1, 0x9}}, {0x1, 0x4, {0x2, 0x2}}, {0x0, 0xe1, {0x2, 0x8}}, {0x4, 0xbdec, {0x3, 0x1}}, {0xf2, 0x9, {0x0, 0x80000001}}, {0x0, 0x1000, {0x0, 0x888}}, {0x1, 0x185, {0x0, 0x1000}}, {0xfffc, 0x0, {0x0, 0x9}}, {0x8, 0x1, {0x2, 0xdaee}}, {0x2, 0x8, {0x2, 0x100}}, {0xff, 0x9, {0x3}}, {0xffff, 0x8, {0x0, 0x9}}, {0xa3, 0x7ff, {0x1, 0xfff80000}}, {0x5, 0xc3a0, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x6, 0x0, 0x8, 0x1f, 0xf, 'syz0\x00', "858e293510022b5e02ef284f73a046e6febc510f61b2216e18d8de3dcf2037e1", "5cf91289b353530768cc0f62ae8d53c862ef32571586f99904bb75ca62ffe316", [{0x800, 0x6, {0x0, 0x7}}, {0x169f, 0x0, {0x214340addc7ddfe3, 0x1}}, {0x400, 0x3, {0x2, 0x8001}}, {0x9, 0x6, {0x0, 0xffffffba}}, {0xe81, 0x7, {0x7, 0x101}}, {0x6, 0x3, {0x2, 0x4}}, {0x9, 0x1, {0x1, 0x20a8}}, {0x63e, 0x7fff, {0x0, 0xff}}, {0x7, 0x2, {0x0, 0x100}}, {0x8000, 0xffff, {0x2, 0x7}}, {0xff92, 0x81, {0x0, 0x686}}, {0x9, 0x57, {0x1, 0xffffffe1}}, {0x7fff, 0xab7e, {0x3, 0x3}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x1774, 0x5, {0x1, 0xfff}}, {0x8001, 0xfff9, {0x2, 0x5}}, {0x0, 0x8, {0x3, 0x1}}, {0x6, 0x6, {0x2, 0x2}}, {0x9, 0x64, {0x3, 0x2}}, {0x5, 0x40, {0x0, 0x52e}}, {0x7ff, 0x7451, {0x0, 0x9}}, {0x3, 0xa957, {0x2, 0x101}}, {0x9b3, 0xecc, {0x2, 0x8000}}, {0x0, 0x8, {0x2, 0x9}}, {0x0, 0x1, {0x0, 0x9}}, {0x7, 0x3f, {0x1, 0x4}}, {0x101, 0xff00, {0x0, 0x8}}, {0x3f, 0x20, {0x0, 0x8001}}, {0x1000, 0x39, {0x0, 0x3}}, {0x6, 0x7f, {0x0, 0x1}}, {0x4, 0x20, {0x3, 0xff}}, {0x20, 0xff, {0x2, 0x6}}, {0x8000, 0x1, {0x3, 0x3}}, {0x6, 0x3, {0x1, 0x7fff8000}}, {0x7ff, 0xee, {0x3, 0xffff}}, {0x597c, 0xfff7, {0x0, 0xc0000}}, {0x3f, 0x1, {0x3}}, {0xe2, 0x8000, {0x0, 0x28f}}, {0x8001, 0x7, {0x0, 0x3}}, {0x8a41, 0x4, {0x2, 0x4}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004814) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:02 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) [ 198.642694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=9362 comm=syz-executor.2 15:31:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x0) 15:31:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001440)={0x1, 0x0, 0x1000, 0x45, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/13, 0x6c}, {&(0x7f0000000400)=""/166, 0xa1}, {&(0x7f00000004c0)=""/191, 0xbd}], 0x1127, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000200)=0x1) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={r7, 0xfff, 0xd8, "4b3d230d67070d16cb64216002224f7da4df815c38a2a4628c676389e38248d54e36c1a11f75f8f21552140ad9604a6ce4b9d090969db105cd072918013ffbfa1510a0206a3033fcf943a7b90aee6fbebc366ff6ea31c0fee8fdda342276bc2fcb208baa581ce839edff3c86dcf8bebbaaf41029c00758e437e2333a74587f19a4dfac3e7b7f7fd58ded9bad6bcdaa73e2c14e186e43294f5746fc03eaf4176c35cfcabbf3660e033428d4307c5528525988a5b9b67590b5aa27ef1c1b4a7b15655fe089a9280b72a7bea9670c130583ef2875c5f3c53214"}, 0xe0) setsockopt(r1, 0x20, 0x5, &(0x7f0000000340)="fb8d8e34268912311213546c65e05a9222105d344762531c212f6f4549b92a44fc7323e0c374ffa7d3fe9aabbd061b30a80d47b993b3fa8a783e80b43be1db8b571824af64b3eae265a790d2e1b57301cb5158dda92d802e937f8165a14045ba00ee39878b0b6908a71a515f6b4636fc3176c10ebe1d66e8761f7655d42628fb6c4d3a3b9be3b6a4db5624", 0x8b) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 198.715989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=9362 comm=syz-executor.2 15:31:02 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x0) 15:31:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0xfffffffffffff801) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x3, 0x4}, 0x20) 15:31:02 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r3, &(0x7f0000000040)='./file0\x00', 0x80) fcntl$dupfd(r2, 0x0, r1) 15:31:02 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x694, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 15:31:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x0) 15:31:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x10000, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x83, 0x9, 0x688, 0x42}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000008c0)}}, {{&(0x7f0000000340)=@ax25={{0x3, @bcast}, [@default, @bcast, @netrom, @remote, @remote, @bcast, @rose]}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000740)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=""/49, 0x31}, 0x40000}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x3, 0x1, 0x2, 0x3, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xb}, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) perf_event_open(&(0x7f0000000100)={0x3, 0xfffffffffffffdcc, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x7, 0x5982deef}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffffffd, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write(0xffffffffffffffff, &(0x7f0000000880)="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", 0x1000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x20008010) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000001880)=ANY=[@ANYBLOB="8062e935cfcfc600000000000000a4b10e8f0400000000000000f28e6fb199b0432239a40750025d5bc9a4d5", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcbfdf25010000000000680e8149b48642001907490000001400180860000069623a74f6db4cc5e55b6d30"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 15:31:03 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000840)={'geneve0\x00', 0x3}) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x100000, 0x0, 0x1, 0x3, 0x1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:03 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) [ 199.351882] ip6_tables: ip6tables: counters copy to user failed while replacing table 15:31:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x4, 0x3, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) 15:31:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x0) 15:31:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r2, r3) io_setup(0x9, &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'ip6gre0\x00', @remote}) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000003c0)="e8d860fbad82cdc7670973550930a53dd303fa4a7693dff3c290dd83a792dd2e5b1495322e3e7c783898996e9390f4b0eec05b9d311c36a542305a4aeab599108ca8bbc7b4bb25159b2b4c22d76f601497464544d57784346677936349628441bc734ea45a043dfcbcda2cca287ff143ac612f50ee672b799adeafcf4148af95ffb93ba9801fc71d9c28c9d494f572905a7e1fcebaf8070a6b3aa45cda6b40dbf18b55bab534f1e7bf666130529350188deb84b06604df4adb1952de0bfd48a8f9cdbbab3401dcd908300a2b85346627aa26f9907ab967ec5e8e2b224ee41fe49b39c9fcfd666def6ed8b124c72b5d1be0fade21398a6fb52c6df14236d70502") ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@remote={[], 0x3}, 0x0, 'ipvlan1\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) readv(0xffffffffffffffff, 0x0, 0x0) 15:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x0, 0x2, 0x3}}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x6, 0x0, [{0x80000019, 0x7ff, 0x3, 0x4a52, 0x1, 0xfffffffd, 0x4}, {0x40000000, 0x4800, 0x0, 0x80000000, 0x0, 0x6, 0x19}, {0x0, 0x7f, 0x4, 0x4f, 0x8000, 0xffff, 0x3}, {0x80000008, 0x101, 0x2, 0x80000001, 0x8, 0x72, 0x9}, {0xa, 0x20, 0x6, 0x100, 0xfffffc01, 0x5, 0x800}, {0x40000006, 0x0, 0x6, 0x1, 0x73125223, 0x9, 0x5d29}]}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000040)) 15:31:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) 15:31:03 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) 15:31:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r2, r3) io_setup(0x9, &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132}) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'ip6gre0\x00', @remote}) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000003c0)="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") ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@remote={[], 0x3}, 0x0, 'ipvlan1\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) readv(0xffffffffffffffff, 0x0, 0x0) 15:31:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) 15:31:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:04 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x4, r5, 0x2}) 15:31:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0xffffffffffffffff) 15:31:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) 15:31:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) 15:31:04 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:04 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) 15:31:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) 15:31:04 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:04 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r4, 0x4, 0x0, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040800) 15:31:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:04 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x80) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 15:31:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 15:31:05 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') 15:31:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) 15:31:05 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:31:05 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r2, r3) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:05 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') 15:31:05 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:05 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') 15:31:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:06 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') 15:31:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:06 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:06 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:06 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:06 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:07 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 15:31:08 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 15:31:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 15:31:09 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x10000, &(0x7f0000000000), 0x0, r1, 0xe}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f0000000900)="b963080000b876a406c3ba000000000f30c744240001000000c74424025f000000c7442406000000000f011424b9800000c00f3235008000000f30c4417f703f07f2406fb805000000b9a3660000430f011864400f320f01f8c4427d24be0000c0fe400fc7bcbb1d000000", 0x64}], 0xaaaaaaaaaaaa71f, 0xc, 0x0, 0x1a) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="010100000009000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:31:09 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x17, 0x4, 0x8, 0xf1a, 0x741, 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4, 0x7dc}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x3f, 0x0, r2}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0xd5f, 0x6, {0xffffffffffffffff}, {}, 0x3, 0x5}) ptrace$pokeuser(0x6, r5, 0x8f4b, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x7, 0xfffffffffffffedf) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)) 15:31:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:09 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 15:31:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)) 15:31:09 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:09 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 205.960259] FAULT_INJECTION: forcing a failure. [ 205.960259] name failslab, interval 1, probability 0, space 0, times 1 [ 206.080742] CPU: 1 PID: 9729 Comm: syz-executor.1 Not tainted 4.14.183-syzkaller #0 [ 206.088858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.098216] Call Trace: [ 206.100819] dump_stack+0x1b2/0x283 [ 206.104477] should_fail.cold+0x10a/0x154 [ 206.108733] should_failslab+0xd6/0x130 [ 206.112718] kmem_cache_alloc+0x28e/0x3c0 [ 206.116877] __split_vma+0xc8/0x6c0 [ 206.120519] do_munmap+0x241/0xc40 [ 206.124067] ? arch_get_unmapped_area+0x560/0x560 [ 206.129013] ? file_map_prot_check+0x195/0x2c0 [ 206.133611] ? inode_has_perm.isra.0+0x153/0x1d0 [ 206.138372] mmap_region+0x16e/0x1060 [ 206.142269] do_mmap+0x5b3/0xcb0 [ 206.145647] vm_mmap_pgoff+0x14e/0x1a0 [ 206.149547] ? vma_is_stack_for_current+0xb0/0xb0 [ 206.154515] ? __fget+0x226/0x360 [ 206.157978] SyS_mmap_pgoff+0x249/0x510 [ 206.161965] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 206.166899] ? SyS_clock_settime+0x1a0/0x1a0 [ 206.171330] ? do_syscall_64+0x4c/0x640 [ 206.175308] ? align_vdso_addr+0x60/0x60 [ 206.179384] do_syscall_64+0x1d5/0x640 [ 206.183286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 206.188479] RIP: 0033:0x45ca69 [ 206.192185] RSP: 002b:00007fbb4116fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 206.199895] RAX: ffffffffffffffda RBX: 00000000004f5e00 RCX: 000000000045ca69 [ 206.207165] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020701000 [ 206.214439] RBP: 000000000078bf00 R08: 0000000000000003 R09: 0000000000000000 [ 206.221711] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000004 15:31:09 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 206.228983] R13: 000000000000073e R14: 00000000004ca235 R15: 00007fbb411706d4 15:31:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f0000000200)=0xfff, 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) r3 = dup(r1) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000140)={0xa000000000000000, 0x4000, 0x80, 0xd, 0xb}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvfrom$l2tp6(r8, &(0x7f0000000180)=""/68, 0x44, 0xc0000000, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x20) r9 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r10}) 15:31:10 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:10 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:10 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:10 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:10 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0xcd0d01, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x4, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x50, r5, 0xf0f91000) 15:31:10 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) 15:31:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:10 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashm\x1am\x005\xdb]\xd2\x86,\xe9w\xc0\xd7:w\xc6\x10\xa7\xe7\xa5\x1dQs<{\x10\xadV\xfe\xd3L\xa3\xbb%\xfe~\x0e\xc2\xc5\xee\x9b\x82\xd7\xcc+\r\x05NcE\x90pKtS\x9eh\f\x1c\x14\xf1\x14\xf9\xd4\x9e\x98\xa5j') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x0, 0x0, 0x81, 0xfffffffa}, {0x0, 0x1, 0x43, 0x3ff}, {0x6, 0x7, 0x4, 0x49a5}, {0x1, 0x3, 0x0, 0x5}, {0x66, 0x69, 0x4, 0xffffffff}, {0x6, 0x3f, 0x81, 0x3}]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0), 0x100000fa, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000100)=0x10000) 15:31:11 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x254042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200801, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet6(r7, &(0x7f0000000200)="ae79791db28b550446197c678738b327f4e0177d50bd16e9c0af728775748a12cf7f01149b37c3b70d285c29de4062b33a7292be808a1f6265d2dfa644d9f1b61bc3f1ec672ff4d170e0c08ddf83669e41032506b4b4aba3d80ce3274085163a2a843647df448712ba7480fcbd1f7f8250153d4471004d50", 0x78, 0x4800, &(0x7f0000000280)={0xa, 0x4e23, 0x7fff, @loopback, 0x7}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x3c}}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r8 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f0000000080)=0x101) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000c, 0x12, r0, 0x10007000) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000001c0)) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)) 15:31:11 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/200, 0xc8}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/174, 0xae}], 0x7, 0x6) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="368087a4", @ANYRES32=0x0, @ANYRES16], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x5, 0x8, 0x3, 0x1, 0x1d}, &(0x7f0000000640)=0x9c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:12 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:12 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000100)) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.current\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000040)) 15:31:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:12 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:12 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES64, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800a30090000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) connect$packet(r2, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0x1}, 0x14) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000006f830dd77af9ed547725cbf7eb6342eb3ead7f1f5e46fb174e87336a429ab7be440601ef052fc111b9d92c29005319edd2bc961b522d044f841bbf8b92bed1cbb4e0d8d7bae27aacbbb9d897316809956cd793f9c21eb7d2f9f529533799b8c94438caa6187723f40efd41c7f0b21244", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25180000000800010003000000080001000300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80010}, 0x84) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 208.989830] nla_parse: 18 callbacks suppressed [ 208.989835] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 15:31:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 209.082967] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 15:31:12 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x42400, 0x0) syz_open_pts(r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x280000) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x2}) 15:31:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2e) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x88000, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x1413) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000240)) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x210902, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) ioctl$FITHAW(r1, 0xc0045878) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) signalfd(r3, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/\xb7\x8c\xf2\x17\xb7~\x93\xadem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000100)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x14680, 0x0) connect$bt_sco(r4, &(0x7f0000000080), 0x8) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x3c, 0x4, 0x5}) 15:31:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x301400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1411, 0x800, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000240)={0x0, 0xa10, 0x5, &(0x7f0000000200)=0x100000001}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0xee, 0x6, 0x81, 0x800}, {0xffff, 0x0, 0x50, 0x20}, {0x868c, 0x3, 0xf9, 0x7fff}, {0x9, 0x18, 0x80, 0x8001}, {0x6, 0xdb, 0x5, 0x6}, {0x6, 0x6, 0x2, 0x5}]}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x3f, 0x0, 0x3018, 0x2, 0xb6, 0x1, 0x5af8, 0x1}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x800) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)=']W\x13]\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/\x00\x95{e\xfb\x91L\x98\xdd\xda:\x7f9\xeb;\x96\xab\xc5\t|\xbc\x95\xe2L\x16;\x97\x8d0\x0e<\x9fWV\x1c\xcb\xd5\xf3\x95\xa3\xde28\xab\x0f\x8d\xabt{\xbdo\xf5\x981{\xc5\xb6\x01w\x0f\xcb&\f') r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="feacc266b3ac854aebd732abc9c5734f7f1d6725c515c14ab68ce32d1ff8fd5916fa7d903f96ff6dda21f8a31a4a55f2ee9307b1737655fee49eb0375687b5210017bca45dd8f2565f0838cb33bf04763fc2bd66480028a11c15636dfdf06b80150b53803168075017aae7fe54554612a1adae9b851097b5ae0a1ac0be4d21f83b5e59937cc263d9fa71da315e518747", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x9}}, 0x9, 0x20}, 0x90) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) sendfile(r5, r7, 0x0, 0xe2f) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') syz_open_dev$ttys(0xc, 0x2, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='em\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xcdu\x8f\x9c\xe9\x9a\x04K7~s\xd85-)\xc7\x14\t\b\x8b\x9cI2\xaa\xde\xbeu\x92\xa6Q\xd1\xfa,\x8a\xb4y\xdc\xd1@`Awy\xaf\xe1\xef\xe6\xf1\x86\xb4\'\x13-\xe0<\xea\n\x85\xe2A\x8dq\x81\xef\x8d%*\xd1\xf4\xb4lk\xd5<1\xc6.\"/\xbe\xca:\xda\x16\x8at\xfe\xe3\xfcQ\x9ezsPK\x9f\xacG^\xa5{\x10\xe8q\xf7e=\xd8\xeaW2\xf2\x91\x8e\x1a+k\xc3\x9d\xb1*9\xd8\xfc\xcf\x8f\x19\xfe\x02@\x80\xddC\r)\x98V\xf1\x93\x86\x04\xa8Ge\xd8{kj\x9eSm\xd6\xea\x92\xd5\xef9!\x82\x95\xce\xba\xf1\xd1\xfa\xb9\xc9\x01K\x92\xb8\x05Y\x9d\xb3n=\xed\xedW\x1f\xdd\xd0\x9a~?\x9b\xf7\x8d\xa2Jdj\x8b\xc5k^\xf7]\xe2\xb4\xd2`') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000000)={0x0, 0x8001, 0x8, 0x0, 0xd}) shmctl$SHM_LOCK(r1, 0xb) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)) 15:31:14 executing program 1: rt_sigtimedwait(&(0x7f0000002500)={[0x81]}, 0x0, &(0x7f0000002540), 0x8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001c80)=[{&(0x7f0000000040)=0x2, 0x1}, {&(0x7f0000000080)=0x1, 0x2}, {&(0x7f00000000c0)=0x2, 0x1}, {&(0x7f0000000100)=0x2, 0x2}, {&(0x7f0000000140)=0x2, 0x2}, {&(0x7f00000001c0), 0x1}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000280)=0x2, 0x1}, {&(0x7f00000002c0)=0x1, 0x2}, {&(0x7f0000000300), 0x2}, {&(0x7f0000000340)=0x1, 0x2}, {&(0x7f0000000380), 0x2}, {&(0x7f00000003c0), 0x1}, {&(0x7f0000000400)=0x2, 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000480)=0x1, 0x1}, {&(0x7f00000004c0)=0x1, 0x1}, {&(0x7f0000000500)=0x2, 0x2}, {&(0x7f0000000540)}, {&(0x7f0000000580)=0x1, 0x2}, {&(0x7f00000005c0)=0x1, 0x1}, {&(0x7f0000000600)=0x2, 0x1}, {&(0x7f0000000640)=0x2, 0x1}, {&(0x7f0000000680)=0x1}, {&(0x7f00000006c0)=0x2}, {&(0x7f0000000700)=0x2, 0x1}, {&(0x7f0000000740)=0x1}, {&(0x7f0000000780)=0x2, 0x1}, {&(0x7f00000007c0)=0x1, 0x1}, {&(0x7f0000000800)=0x2}, {&(0x7f0000000840)=0x2, 0x1}, {&(0x7f0000000880)=0x1}, {&(0x7f00000008c0), 0x1}, {&(0x7f0000000900)=0x2, 0x1}, {&(0x7f0000000940), 0x1}, {&(0x7f0000000980)=0x2}, {&(0x7f00000009c0)=0x2, 0x2}, {&(0x7f0000000a00)=0x2, 0x2}, {&(0x7f0000000a40)=0x2}, {&(0x7f0000000a80)=0x2}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00), 0x2}, {&(0x7f0000000b40)=0x2, 0x1}, {&(0x7f0000000b80)=0x2, 0x1}, {&(0x7f0000000bc0)=0x2}, {&(0x7f0000000c00)=0x1}, {&(0x7f0000000c40), 0x2}, {&(0x7f0000000c80)=0x2}, {&(0x7f0000000cc0)=0x2, 0x2}, {&(0x7f0000000d00)=0x1, 0x1}, {&(0x7f0000000d40)=0x1, 0x2}, {&(0x7f0000000d80), 0x2}, {&(0x7f0000000dc0), 0x2}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=0x2}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=0x2, 0x2}, {&(0x7f0000000f00)=0x2}, {&(0x7f0000000f40)}, {&(0x7f0000000f80)=0x2}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=0x1}, {&(0x7f0000001040)=0x2}, {&(0x7f0000001080)=0x1}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=0x2, 0x1}, {&(0x7f0000001140)=0x1, 0x1}, {&(0x7f0000001180)=0x2, 0x2}, {&(0x7f00000011c0)=0x1}, {&(0x7f0000001200)=0x2, 0x1}, {&(0x7f0000001240), 0x2}, {&(0x7f0000001280)=0x2, 0x1}, {&(0x7f00000012c0)=0x2, 0x2}, {&(0x7f0000001300), 0x2}, {&(0x7f0000001340)}, {&(0x7f0000001380)=0x2, 0x2}, {&(0x7f00000013c0)=0x1}, {&(0x7f0000001400)=0x2, 0x1}, {&(0x7f0000001440), 0x2}, {&(0x7f0000001480)=0x2}, {&(0x7f00000014c0)=0x1, 0x1}, {&(0x7f0000001500)=0x2}, {&(0x7f0000001540)=0x1, 0x2}, {&(0x7f0000001580)=0x2, 0x1}, {&(0x7f00000015c0)=0x2, 0x1}, {&(0x7f0000001600)=0x2, 0x2}, {&(0x7f0000001640), 0x1}, {&(0x7f0000001680)=0x2, 0x2}, {&(0x7f00000016c0)=0x1}, {&(0x7f0000001700)=0x2, 0x1}, {&(0x7f0000001740)=0x1}, {&(0x7f0000001780)=0x2, 0x2}, {&(0x7f00000017c0)=0x1}, {&(0x7f0000001800)=0x2, 0x2}, {&(0x7f0000001840)}, {&(0x7f0000001880)=0x2}, {&(0x7f00000018c0)=0x2, 0x2}, {&(0x7f0000001900)=0x2, 0x1}, {&(0x7f0000001940)=0x1, 0x1}, {&(0x7f0000001980)=0x1, 0x1}, {&(0x7f00000019c0)=0x2}, {&(0x7f0000001a00), 0x2}, {&(0x7f0000001a40)=0x1, 0x2}, {&(0x7f0000001a80)=0x2}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=0x1}, {&(0x7f0000001b40), 0x1}, {&(0x7f0000001b80)=0x24}, {&(0x7f0000001bc0)=0x1, 0x1}, {&(0x7f0000001c00)=0x2}, {&(0x7f0000001c40)=0x1, 0x1}], 0xd, 0x70, &(0x7f0000002380)={0x0, 0x989680}, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f00000023c0)=""/228, &(0x7f00000024c0)=0xe4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x4010, r0, 0x214ba000) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2000) 15:31:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) rt_sigsuspend(&(0x7f0000000000)={[0xa31]}, 0x8) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1f, 0x8, 0x7f, 0x20, 0x5, 0x81, 0x9, 0x3f, 0x40, 0x20, 0x3, 0x6, 0x9, 0x7}, 0xe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$clear(0x7, r5) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={0x0, @default, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x4302, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) 15:31:14 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) socket$kcm(0x2b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xfffffffffffffe9d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x10, 0x0, 0x10002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) add_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r2) request_key(&(0x7f0000001480)='id_legacy\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)=':\x00', r2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) 15:31:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x371102, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:15 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r2 = syz_open_dev$ndb(&(0x7f0000001340)='/dev/nbd#\x00', 0x0, 0xa040) preadv(r2, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f00000013c0)=""/134, 0x86}], 0x6, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0xc03b) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:16 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:16 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x403b}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x7]}, 0x8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r3, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000200)={r3}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x165001, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8000, 0x7, 0x4, 0x1000000, 0xffffffff, {0x77359400}, {0x3, 0xe, 0x5, 0x10, 0x3, 0x0, "882ac94a"}, 0x8, 0x2, @planes=&(0x7f0000000040)={0x80000, 0x6, @userptr=0x3f, 0xf852}, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @default, @bpq0='bpq0\x00', 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast, @bcast, @default, @bcast]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x3a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4a074821}, 0xc, &(0x7f0000000c00)={&(0x7f00000005c0)={0x634, 0x0, 0x200, 0x70bd2d, 0x6, {}, [{{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2df5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3, 0x8, 0xe9, 0x4}]}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x929e}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x838}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x634}, 0x1, 0x0, 0x0, 0x8080}, 0xc000) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) recvfrom$llc(r3, &(0x7f0000000040)=""/136, 0x88, 0x2, &(0x7f0000000100)={0x1a, 0xf, 0x1, 0x40, 0x1, 0x6, @broadcast}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 213.676710] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x360c8000) 15:31:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r3, &(0x7f0000000100)={'syz1', "e4d79cd1973c2fc4291b6fe7fcfd3b5590e0cac661066d46d32c663dd4cf9e7aacf8513fef64ac390d95e0bba1aac7d5f761b4c8a1b651c37853ed8a2f0e9001acfc3cedc4c5501214df1fdc925bfb2712d82878971681f19467096950b7f11f8a344172131c0de6cacb81c46a40981986c736bea01736d99b388123d52f957128b5ac9402aec518400945ebb91eb5669c817142f0cfce06bb8fcc40f08b2a1fdec50372986d6054dc64770f37296db1d4b876fa93c0f816417b033a9c368c352eddcaecda2594d387986f116d2561f76343f4faad50a87d4edaed3cffc42106"}, 0xe4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 213.794697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfe, 0x440000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$l2tp6(r3, &(0x7f0000000040)="dab74346cbce717ec51dcbc41cb30925c3ad95b80af794a74acdd426a4458b0afe83c9b8d01e8621626994b9b1a64f64d285bcbbcdfe168254dc7d5acafcf2d194d86f4bf1d1db190e6b0a977a3ed5e01ab4895a2e8bfb49756cb5701da656eb9a44b64fa95766f8828451595972b3b384cf557773cf93f3822dbc1484fcf472c958ee21a0d6909a70cbc60ed60c09b4590c7cac5b01c7006b04bd193abe6664aa4074d1da0f4ce54a47a9d7d76d6a27e728720725d3280aed6ddb7a68edb82ce5a8e630a94751832e82b2bdc0f6e9290fab3d38ec944f", 0xd7, 0x81, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @private1, 0x2, 0x4}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xe8, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x61}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x44}}}}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff8001}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000001}, 0x40805) 15:31:17 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x40000000) 15:31:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) bind(r1, &(0x7f0000000040)=@isdn={0x22, 0x20, 0x4, 0x35, 0x80}, 0x80) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x100000c, 0x80010, r3, 0x0) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x3, 0x12) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x10000, &(0x7f0000000000), 0x1, r6, 0x8}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000040)=0x1) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f00000001c0)={0xfffffffb, [0x5, 0x5, 0x6], [{0x1ff, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x1, 0x1}, {0x8e00, 0x6, 0x1, 0x1, 0x1}, {0x9e2, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0xfff, 0x0, 0x1, 0x1, 0x1}, {0x7, 0xe55d, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1}, {0xffffffff, 0x8001, 0x1, 0x0, 0x1}, {0x7fffffff, 0x240000, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0xc91, 0x377}, {0xffffffff, 0x6c8, 0x1, 0x0, 0x1}], 0x917}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/236, 0xec}], 0x3, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x10002, 0x1, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffff0000000000000a004e2000000004fc000000000000000000000000000001c94800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e220000007f00000000000000000000ffffac1e010101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000101fc000000000000000000000000000001ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2398670f6a6c6df06e9dac0000020000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000273d0000000000000a004e20000008140000000000000000000000000000000104000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078b60000000a004e23000000042001000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cefdd56b5c651e3b1283e5b7e9174b49db483b4e3f1ec2882b85b3326d8eae6526b3175f7337c54320ff7cc279b95f3e67b7ab3c7f69af5c5554e231d7e85dec879928ba9504a5439dd859b8504a632019db3966e89a4f1fd290f9f16e13055ee5b83b9a79ce6cc366cefcf5d9d9f09b2860e277e0c2157844ddc4f9d7af6b4c7f38dee83db8b82110d4ec29e3d8aa65c1aa4bb3c4de5cd44eab608c48427c3c415b3778222391da7f15ea296118e5e477fdd4a3080707ddbdd0029d79456ef9cead990e189d1580da4fc794c209ef034f5b0db2a21220715c36b045564453695f9c2a1c30b98d332f88f40e8db6652b026d48dccb292e7913f4685af7daae26aeb69b3528739d4cb0a75b3247827a1c54935ad1082cfb78b4be42b05d51a5f2b27e24e708be4f12713f5ba9d5a8c08960a72447c0eb1e1f"], 0x310) 15:31:18 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$l2tp6(r3, &(0x7f0000000040)="dab74346cbce717ec51dcbc41cb30925c3ad95b80af794a74acdd426a4458b0afe83c9b8d01e8621626994b9b1a64f64d285bcbbcdfe168254dc7d5acafcf2d194d86f4bf1d1db190e6b0a977a3ed5e01ab4895a2e8bfb49756cb5701da656eb9a44b64fa95766f8828451595972b3b384cf557773cf93f3822dbc1484fcf472c958ee21a0d6909a70cbc60ed60c09b4590c7cac5b01c7006b04bd193abe6664aa4074d1da0f4ce54a47a9d7d76d6a27e728720725d3280aed6ddb7a68edb82ce5a8e630a94751832e82b2bdc0f6e9290fab3d38ec944f", 0xd7, 0x81, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @private1, 0x2, 0x4}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$l2tp6(r3, &(0x7f0000000040)="dab74346cbce717ec51dcbc41cb30925c3ad95b80af794a74acdd426a4458b0afe83c9b8d01e8621626994b9b1a64f64d285bcbbcdfe168254dc7d5acafcf2d194d86f4bf1d1db190e6b0a977a3ed5e01ab4895a2e8bfb49756cb5701da656eb9a44b64fa95766f8828451595972b3b384cf557773cf93f3822dbc1484fcf472c958ee21a0d6909a70cbc60ed60c09b4590c7cac5b01c7006b04bd193abe6664aa4074d1da0f4ce54a47a9d7d76d6a27e728720725d3280aed6ddb7a68edb82ce5a8e630a94751832e82b2bdc0f6e9290fab3d38ec944f", 0xd7, 0x81, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @private1, 0x2, 0x4}, 0x20) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:18 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:18 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001300)={0x6, 0x0, 0x80d, 0x2, 0x606, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400000400200) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040041) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44005}, 0x11) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendto$netrom(r0, &(0x7f0000000240)="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", 0x1000, 0x841, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000040)) 15:31:19 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x1b3b02, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000340)=ANY=[@ANYBLOB="55fcfdb145ae7afc3603a60010000000"]) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xe1, 0xc, 0x4, 0x0, 0x80, {0x77359400}, {0x4, 0x1, 0x91, 0x7, 0x6, 0x0, "8f5c439a"}, 0x4, 0x2, @userptr=0x9, 0x0, 0x0, r2}) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0xe460, 0x8d67}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r5, 0x0, r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f00006fe000/0x4000)=nil, &(0x7f0000700000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000700000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000703000/0x3000)=nil, &(0x7f00006fa000/0x9000)=nil, &(0x7f00006ff000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006fb000/0x4000)=nil, &(0x7f0000000080)="708b2a7d6df7f2af04da752710d8a8efe49620cdb9b2343408a36ff26a78192e5b7c0bbe7458b79f2a1c3e26a1f4d00b6af670cea65ff6705359a13f9bef2d5fc5286672f4447f3696c3625ca3538629db9fef6c6e2917d1d8a9142ae8fab7f561b3cec73eaddf1e540b110a7195f6971b89c51e77585db4838226cacc68118c5d0cdb81c261010371be27b35d4ff3879b0f9000c6aa6ed11575b953205a93", 0x9f, r5}, 0x68) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) 15:31:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:19 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x6, r3, 0x1}) fremovexattr(r4, &(0x7f0000000080)=@random={'user.', '#\x00'}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:31:19 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:19 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/devPashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x300000b, 0x10, r0, 0x0) 15:31:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/238}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RREMOVE(r3, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:19 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/240) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) 15:31:20 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:20 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) 15:31:20 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x59, 0x6, 0x80, 0x7, 0x5, 0x10, 0x45, 0x22, 0x8, 0x80, 0x80, 0x4, 0xc7}, 0xe) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:20 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:20 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x3f, 0x9, 0x5, 0x7, 0x7}, @alu={0x7, 0x1, 0x1, 0xa, 0x2, 0xc, 0x8}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x7, &(0x7f0000000180)=""/7, 0x41000, 0x1, [], r6, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x1, 0x1}, 0x10, 0x0, r2}, 0x78) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) 15:31:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:20 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:20 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 216.814837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.890237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:31:21 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) 15:31:21 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)) 15:31:21 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) close(r0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/ashmem\x00'}, {0x20, '(%].'}], 0xa, "5a1052d69d6f50251a1734c7108ba9438390daaa629aa63783891acea0c50d0848854fb33bb9a291ef6537d913057349b92db36840fa55deeea38ef6d433debec18efb324ff7739355c551e927ff690bcffa27f4cc75d64f986593bdf8286e1188e1ac2e77d6d9ace6fb4864868ed02826d04a78267282a8"}, 0x95) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 15:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:21 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') 15:31:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt(r1, 0xda, 0x2, &(0x7f0000000000)=""/52, &(0x7f0000000080)=0x34) 15:31:22 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x280000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000001c0)="1fe1685d993ee3143ba2f7fbae4ebb816cdd7a7cc08457fcb3c26b27045e947a0139b616483eee45cd108f98f6276239e207bad4bddc82388f399511930c53715fe1e364dfcb8be800d8c963b5ff16476535d281156e7e1b10337ff8c1d5c229fbd55ea45db7a9ce73de3f41079c1cdd2cda049b343856593b5db700ecd4c575dd4ae8cff0fcfe1a227b1e74bf65db3025b4db3da8edbba6bce6e5946a9d5f8fa630cb12151c434350091138dd9c1f5e69733af3a1bdb08ce161ba0270d6586bbf1d8653a0f672c718ddedb895ac401e009b8b155d", 0xd5) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='Edev/ashmee\x00\x02\xa3\xaf\xac\xe4\x02\x00\x00\x00\x00\x00\x00\x00\xabZ\xef&\xfeD0xffffffffffffffff}) getsockname$tipc(r4, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000480)={@rand_addr, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008880}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r7, 0x400454ce, r9) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0xfffff000) 15:31:22 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:22 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:22 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:22 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:31:22 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x800) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)=']W\x13]\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/\x00\x95{e\xfb\x91L\x98\xdd\xda:\x7f9\xeb;\x96\xab\xc5\t|\xbc\x95\xe2L\x16;\x97\x8d0\x0e<\x9fWV\x1c\xcb\xd5\xf3\x95\xa3\xde28\xab\x0f\x8d\xabt{\xbdo\xf5\x981{\xc5\xb6\x01w\x0f\xcb&\f') r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="feacc266b3ac854aebd732abc9c5734f7f1d6725c515c14ab68ce32d1ff8fd5916fa7d903f96ff6dda21f8a31a4a55f2ee9307b1737655fee49eb0375687b5210017bca45dd8f2565f0838cb33bf04763fc2bd66480028a11c15636dfdf06b80150b53803168075017aae7fe54554612a1adae9b851097b5ae0a1ac0be4d21f83b5e59937cc263d9fa71da315e518747", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x9}}, 0x9, 0x20}, 0x90) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) sendfile(r5, r7, 0x0, 0xe2f) 15:31:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 15:31:22 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f0000000200)=0x13ea, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:23 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:23 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x400000) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.stat\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000040)) 15:31:24 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:24 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)={0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f0000000280)) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x820}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x5]}, 0x8) 15:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x44ad80, 0x0) write$rfkill(r1, &(0x7f0000000240)={0x4, 0x6, 0x1, 0x0, 0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r8, @ANYBLOB="0000007665749b0568ebffffff000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000045}, 0x20040000) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000040)=0xffff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x804e1000) 15:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:24 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 221.043810] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.081604] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 15:31:24 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:24 executing program 2: ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) dup2(r0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)) 15:31:24 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r1, &(0x7f0000000040)=""/71, 0x47, 0x2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast1, 0x7}, 0x1c) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={r1, r2+10000000}, &(0x7f0000000280)) 15:31:25 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x8007fffffffffc) 15:31:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:25 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) ioctl$FITHAW(r1, 0xc0045878) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) signalfd(r3, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/\xb7\x8c\xf2\x17\xb7~\x93\xadem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') clock_gettime(0x0, &(0x7f0000000200)) 15:31:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xa0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x10, 0x3, 0x4, 0x2, 0x2, 0x6, 0x4}) 15:31:26 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x04\x1e\xbf)\xacS\x00\xca\xae\x91\xb7\xe4W(\xce\xd1\xd9_\x89\x10\x19gP\x8e\x16\x80f\x80+\x8f\x18') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r7, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)="356bd50615700c58d8a58afdb15df7b433f4cf3d1292425ab0b512c4e24ba97fdc70662ee7314603dae2536d73cce0e866671ebb85da87fd8aaabd", 0x3b}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x58, 0x4010}, {&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000380)="96ea4017a2f548f7a651e4d352fc450f73e4220f992df47db8b78f134fe6c064709cf164d7a1065f0557d7671959bdebd286bfd70e4c1b870f56779a6e5b83e29b1ab21173acfa5c0247da4e8fed0687b5e56de956435491e9da7108d6047785cedaed74a4393a131dc5f3ab56ec23dd6f17af418b097e66fc17d74be0c8453399692e416742350157e6f794c5ccf9534e20536207c442936c84fd2672bf7619e583cc0ad1cc0bcdac41c30b7719c7c1e16717ddd0fe83520f69f438776c89bf2c81fb15004593480c99f39f4fb5d4694c", 0xd1}, {&(0x7f0000000480)="4a5b67e621b03d0c8b8f2da8dccc4a3bccbfc035f6a0e23a0cc93089620d081b00af38fa37cbcb0821f803eaa510ddc36ad3743d6fac5c1727e446fa669c017fbc8a74cdc6e9e84dc2260015deb59f4887c14857bc4b114f2479547b8687fbef1ff350a6746f692656a825f06d20f3f95f4affb3b957cb632465f2f3224a11a6026479467ba88ba6bbbdd149190555af1f338c7b66884fa01a2a436269fd100a201f431fde73745f8bf7c2e1c050f6f61265b417bf2489d0b55b5a055219dfc538dbb8c20bcc4faf7bfe54fe310a7f69692bb6d9e029efc6e4e964a617f0c31864b84631fb54701ab42ce599431dd664a5", 0xf1}, {&(0x7f0000000580)="4d67093395a4f2599b52badbbad5281ca9b08789bc9a1b1c085109cd568274d6254684dbeafc85ec0b3d82fda72c004365254d0304", 0x35}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="41cfd4a48199afb9a03db07899bfd8a828251db869b49cc0b9a07ec6e9f7ffa3262a6202b889e9a7f4916256cbe3d0b8e314e532eab5a4265d20f2067bf1bb224dd3a0edba1283345a68491e27ccf2393d9bb65f4bb4ae4bbc85ed69eed857c8879bc7181697bbce27041bf00b9edc9db74c50a3cc16524476f1f4f809b9fd5a9b68c73abe4bb724adf32901b01c98eaa45da055197fc3f8b1fb0851a037828e6f72bae41f2d2eb65619ebc50a15c8899469ca07a5bb1391b69a7f9bb322ea28adecdcf4a8a43a346fb75e6cea593570553df54d9aac04ede0fde412c6e0e4abe7bd5d865d80", 0xe6}, {&(0x7f00000016c0)="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", 0xff}, {&(0x7f00000017c0)="401a40e20c3befec4a96ffcf7aa146f5431e89f2a2bf8e960891dfcb59cecab04c57d78df7989bda055418f3cdfbab106a4a6e5164cba8e93a503b3352d78ac7d97838ff4d3588e58fa39983fe7db0", 0x4f}, {&(0x7f0000001840)="18d21e9e896064c9024bfd6042c67f1334437e9014b8cc7df3a66d2800b0cb182c236fcb3b79240d6c209cc69802bdaa1e2a57f5d2143cce6fd31673ec997bdd5cef1561fe2becc061ee4067be034d3c4857ed703a2cb8d4", 0x58}, {&(0x7f00000018c0)="d1efffb7bf5a20c05f9ad0dbfac59be271850b7c9b2784a41889a3efde3662f085800faad6e64315b8dc45f7d6778a3fa7b12bd9e0a14d446d24f386a9c3328535f751e46486774a6fc4dfe8befbfd0e0613345d75e305a24a03825eba70d7a8c4e3c6f0789cce517ef6d30b77c4b525938d0cff59e612860c89953cc3a57181f44e66636e41003ae3759082aa8f4c63845a18fac480dfa7a2c0f584e655281350bb9d8db95ce3e70a930e4210afc38266025f90e644e46999093d427066f236fff4f6141068cfae507502a13566b639a7f89f3a67d1b4fcf9f8b9e04129607688c417345411846de65d5e7f", 0xec}, {&(0x7f00000019c0)="2e4db6c6663622f7d647c94dd7ccb44e7784df5f36feb607e634cc735b63573c3e7acd4e56f3ed568795020e8e42f54e836b957052ffc9f83901eba376023b08d0c316666bf6c51ede3eec13bd3e224de7ec290aa377ebfda23e3c44e33038732f7e71c5f0e1d711712d8fac2150460439fc5ae269a9dd60d8e6ed2d0975ee6f694e81", 0x83}], 0xa, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x4000000}, {&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f80)="34b379f37961d1cbbfd7229da530f3e982f4cf811f6aa5af00e5bbd255251784aeb3716784d1a36f527ed60fc932be10a40a0c12a95289c13f422bd9082b4cd2f19c97", 0x43}, {&(0x7f0000002000)="2b2bbbecaae121476cd450bd03ca33b4a6bd54b1b497e0d2c7198a59a7488f4ae2bfd4265dc81abe65bd1a01e07377b22e042fd88f44dcc5987b", 0x3a}], 0x2, &(0x7f0000002280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xb8, 0x24040100}, {&(0x7f0000002340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000023c0)="eb9201027fda971f8b6a6ed49935230ff44fb0ab0ec991c307f0653e2372837344dd8c6a8b502e774135901119bb929be09aa9eb08253f99aeb0f26ab0e16a56075c79aea906acf62c56d72e562f85b71258aa882d537e62e54f5e4cb40698264101940703bec2681b327ed624688eac3f699a6ccaeea0b188968a58ef9dd357795cd9f181e91ec015fc0020be0f08c695ba106d23dc9d7f0416353741da481696d6f4389eaaf37ffdb0c1299e0cf02189a322886028dcf4781fe7adbe02e4e964491054d0786e1b54c7c5d57fae9d", 0xcf}, {&(0x7f00000024c0)="f4b2cf66c4689a136b49627b9f684b2059a89830aec2f2324649494254ee1c0d1ac21b848332398739b9cc831cd046e46c26c299bec090c23ec4a57223a368fa11ed09bf6523e06ca2025bd29b49d3e0d5ad0100", 0x54}, {&(0x7f0000002540)="ebbf781e186232290fcabe89dae5f482ad035042733b13a21124848a3ad6021a1d074a4f1f258113b241fe34452c46726736989eab994ea0038478732b2e6b703edcc8a67ee4142f60d11596645a09cd3b635f9234039a915a59b262b34bf6f86e9beced9b1a5e3e017dbb01ff9c22017c874a988c3927b4e6647c61157f009128b7402167c42cd3859437a4c3b9ad153b51b54a8d6c520571a06bec68a065a9e9", 0xa1}, {&(0x7f0000002600)="f467379f9034c7a2f32f4bb0befdb904fd10804d1117f3389cce22fa1aeaf329276327368c9b98c59238449f4939df3064f56e604224ae7dce9c", 0x3a}, {&(0x7f0000002640)="738f414bf6fd7c265d68da2d87535cdc0aa4fc0d592f53e5de7b8e4bc5d0d66cd43e65240f64ece1b13ee1f7e8453914a0c405a999f24c1530eb00d8ccaf06515ec116f730e79d6bea8f10ee91bdcf3a66f72044ef101414b5c1d9cb65b8b0e13cd0cdc1ba8e9e51ae924105ef355bd57d003a2af129f2bbcb5c65c4db9b3e5d4d7d1a24cfe4343b4562d8a14dfaa7ead94bcd58f121bab8b027c1adf6c978d9aade7a1d444c805f6e92cfe078654f", 0xaf}, {&(0x7f0000002700)="46b98e062e678c97f6662cd4e09412761dd93aabbba0de6b598d1928fc3441263f0d4ce1937981b5b0c0b34548b0debcc90dc3a63a5e7f3acfd61bd23930512bce713efafe2bc53a43b81236f56072d7eb21867e1282cb85d759c2147f525c319225355a468d7b2de04849", 0x6b}, {&(0x7f0000002780)="b18a5399c4f2844798aee153b360e342b536ba058d5b85458a496f90b9da78805e", 0x21}], 0x7, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r0]}}], 0xe8, 0x4000c51}, {&(0x7f0000002a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002a80)="ad702df934321f54cc7971e48f93d6f7991dd416e70520f7236138eff35f5bec89d80e938ab8ba842e4fe397c7", 0x2d}, {&(0x7f0000002ac0)="41e8b431d7c8dad56b2059a0d251f2a83edc9428e79596ea863dd49ca36cab5905d355cff787f4d54e9042cefa6bc55c3088d29a487f3e9204fa7e6534d2578ad99d74604805fdeabfbe94438fed", 0x4e}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="45d453d31dabf0025b6edff94312c0384acdc4976d7de0a5f283faf25afe363d6ce23b69eb0de79df935", 0x2a}, {&(0x7f0000002bc0)="a0126f1192607be59ed7e55f816b2569385d3b5d3eb0b0def7b9656c1c8ccdd391694c9b6b105a2a65b2cb7877bbcb8c64dbbb618ec3e96b97f5027028d4056e35944ff88494b7a2e7571570687c10f931717441d2e9a520e2b9800ea879f525f096c3bdaf8e2fc63f9ea48013b347dcba21bcf077c014a82e7a4d90d6c44294c646e9ce24d7d49abe13f1ace021dde7b384e3e5a0e96c17e0baadec29a38eeb3eae3dfa058646e593ce4fd8bafd824d22ddd28aa6", 0xb5}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x40, 0x404008d}, {&(0x7f0000002d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000002dc0)="e12e9248da0bfb6a6cb843cdf16ec237a86791240558f46a73af71a256d0e044bde5e5df078fd86499dfff5fcc95f982269ca73a7d38c06f9ea269013ae09ef096e76eddb7c9f36b77362ba8899330b17e35931288ef2137ce3de39b162edf62836f0bb23528f4823279fb9c9b443f4b50413adb843613e3aea8a9193b49fef6c9bb8bdae4678a63c12c0d5546d546cff968812a5f472c9fd56451f4d0fa7134746872e4ceeebd7dd648e1ce8d7c3530a213609bd0392b64a4d401481f1a521189e437af263d22014195da0483bfe1b42d0c", 0xd2}, {&(0x7f0000002ec0)="737067bd464a5743fe92cacd0ca4101c376e7936af368096813d81f352a3b885bd587861117b6a7cebc8621b1eab53dc741d02c819952a779db2ba6481c4f60768f74a539d09cb88b1890f5ac31744f09a5ec4dc656dd5baf9d025282338f39028fdb1e63171e1f08e0001f71e0b201ad31af7d2835e3fac2f9c6e837bbcf4541e1c79fae2e6eccfc55d74adde81fb174df02ec943dbb10f92557fcf4010d3ef8f5ac3987c7c1ea3225f8b28aeeae00f14b20b5dc34bed2d4ad9c04283e0a5906df35df7170ea49e5867bcd47b13f90883", 0xd1}, {&(0x7f0000002fc0)="c5634a0033459cd427dfb0f301be2b615cf1d150723591c8411af629f3539e7072bc3eaf48593196d0fd8fd0ceb5b4cf4f9d07cfd77eba4fb336c4129f4cb78e1a49437c1b2b73f869d1ee32c35706705d9054a7b16df7d3917924ac996eb6a1e44f257c648622b0bd3d9d51af24b8f32c975e04e004f241a791f7b3356fa86549c820b2c927ad7020e8d209be09028e11304d715324c2419d5478c70c4ffa713c16eedacf2bb0d7aaaa20182b48f1a9ad041abf1c017e9c16c497ff4f8989313eb0d85b91fc05db3f0387540bb764dd3ae53181f0d71364b51f1762c8f3f3a397db49b39da586", 0xe7}, {&(0x7f00000030c0)="6719d08451adc6c486cecc3b6fa7b161986f84d86b9422c09838cf09e6f1688d9ce829ba7796ca617978e095c90bdfd914d8e784f0a55df88d168fbd85d3031c9e2c3dd70246198bf887ae3f23ec22aae2f75a3277e0dca4e3dd16a77822d1de950b3e3e211bdf0e1a3eed4fa0dc6b4ea0dcf0412d4e522b1dd0dde20f0b342c4a5dd7fe128aa22c6e3fcf750f07e86c63da74b0664ece311a1de69432ffdb28626b239c2deeb0a10c1f4493f5ba1431040978373fb2c591c7cfafd51715e456d9351f84b10ceda792d9a33146ce83fd8695362e110a3ed87bb872d666ff610ccbfff79adc263b09", 0xe8}, {&(0x7f00000031c0)="a057c9f383f321b2d094c94b0f9f2a5215ff379da9af405f79da251579ccd8b49e9ca433f0023b34c856d50b0671b56a3bbeeb64a5b5b68cfdd24e7a0f8f5d9543b7c47364a4ead95883ba727b700bce60650a1cb2c9a433ab1d6c227b9baf751be633bde42cb3df4834c59207b943616f81a7cdc73b4feab8298fef81433c44d27cf436cbe618b49726e67e290f4d848923c7bb1b41a19a1ca38a40247c90056eab51252a553db1756e8547e1dcb799000ce005783d3290297fb5ebd600f29ca0e4e5369f3a01b8da2b4838f31d274ab88c5e8b0264c8607fa89c421938783ca6a9a88f", 0xe4}, {&(0x7f00000032c0)="a3d625955b1223f660c6e2040c214f35b9ef223da19cdd5bbd65180d9059bf006f9f0026ef5bbb02b1921177b2c58db12ab45ea5fa9981f34f14569d8b1570bc905aeb163b04549b036476464e54092e84267104d926c68db7e8d8d4b0fba5053f152f10fe526b21599b1ff7c7fbb8afa23e35", 0x73}, {&(0x7f0000003340)="fd60e2e2c51b2a34149197264fb4486b2f3954fc43b61b25fefd3730f6fa8a18d6857ed11633096537bf28564d4c4f87b913452ac4e481d3b410d32b2ef048f8a2f0e24e9502a1d0f429258bc10083cd3a0c4e8b42ae6dc3569314b3bc88113f698bf6bdec2e8be86f986508095c5acfb3169a15c3b5c4cbab7940d9f50a5652320a76eb94f7ac2bdf54098ecdfac860ea165b4cb1ddd4d966da72b660c8c2ca52f26c", 0xa3}], 0x7, 0x0, 0x0, 0x10}], 0x6, 0x48004) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') 15:31:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/ashmem\x00\xe9jf$7\xc1h0\xc9f*;\xf3eJ\x90@Af\xd9\xbe\xcd\xde\xf7\xccJ3\xfaD\xd4\xe9?]\x951\xb0\xddU\xdf8d\x1d\xe79\xe1|\xfb\x9c\x9f\x1b\xbd\xafN?\x1b\x93\n\xa3.\x7f\xd2\xd2M\xba\xb1\x9c\x9d|+x\x92\xa1|j<\xa0\xd69\x8d\xe2\xd3(\x17\xd9\bmG\x1f\xde\xdc\x02\x1aN3\x1ee\xcc\x80\xa5w4\x96\x04\xce\xf7\x88\x87i\x82\xafGHM7\xef\xca\xb0L\xe5Y6\x93\xdf(\xc7\x89\x86(\x99\x12mv}\xc4[\xd9\xed\f\xa2\x1b\xc7\x00>\xeav\xf4\xb63\x01\xd5`\xcb\x9e\x14\x86Dj\x18\xe6S\x15c\x82\xe5\xc9\xfc\fN$') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) clock_gettime(0x2, &(0x7f0000000380)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:26 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:26 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:26 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r1 = accept(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r3 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r1, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r4, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r2], 0x7, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:26 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:26 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xfffff000) r1 = msgget$private(0x0, 0xc0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x8100) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x10001, 0x80140) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0x5, 0x40, {r3}, {r5}, 0x13be, 0x81}) recvfrom(r2, &(0x7f00000001c0)=""/120, 0x78, 0x40000000, 0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/53) 15:31:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r1, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0x7f, 0x30}, 0xc) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="021f0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x401}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r3, 0x7014) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:27 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:31:27 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x8001, 0x56555959, 0x1, 0xfffffff7, 0x1, @discrete={0x3f, 0x1}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x766045cbdf798e30, r0, 0x0) 15:31:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)) 15:31:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x3ff, 0x42) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)=0x200000000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x9d0000, 0x7, 0xb66, r0, 0x0, &(0x7f0000000000)={0x9909d5, 0xe96d, [], @ptr=0x9}}) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f00000003c0)) 15:31:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:27 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:27 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:27 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:28 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:28 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x80, 0x5, [], &(0x7f0000000000)=0x82}) 15:31:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101080, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400000400200) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4040041) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40800) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:28 executing program 4 (fault-call:5 fault-nth:0): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 224.722246] FAULT_INJECTION: forcing a failure. [ 224.722246] name fail_page_alloc, interval 1, probability 0, space 0, times 1 15:31:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:28 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 224.790136] CPU: 1 PID: 10970 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 224.798140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.807496] Call Trace: [ 224.810093] dump_stack+0x1b2/0x283 [ 224.813733] should_fail.cold+0x10a/0x154 [ 224.817894] __alloc_pages_nodemask+0x22b/0x2730 [ 224.822661] ? __lock_acquire+0x655/0x42a0 [ 224.826910] ? __lock_acquire+0x655/0x42a0 [ 224.831154] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.836009] ? mark_held_locks+0xa6/0xf0 [ 224.840082] ? retint_kernel+0x2d/0x2d [ 224.843984] ? retint_kernel+0x2d/0x2d [ 224.847889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 224.852653] ? check_preemption_disabled+0x35/0x240 [ 224.857681] ? retint_kernel+0x2d/0x2d [ 224.861584] alloc_pages_current+0xe7/0x1e0 [ 224.865915] pte_alloc_one+0x15/0x100 [ 224.869812] __pte_alloc+0x21/0x280 [ 224.873448] mfill_zeropage+0x8fe/0xce0 [ 224.877033] FAULT_INJECTION: forcing a failure. [ 224.877033] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 224.877435] userfaultfd_ioctl+0x1542/0x2f70 [ 224.877449] ? lock_release+0x41e/0x7f0 [ 224.877463] ? userfaultfd_read+0x1270/0x1270 [ 224.877474] ? mark_held_locks+0xa6/0xf0 [ 224.877494] ? retint_kernel+0x2d/0x2d [ 224.910057] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 224.915082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 224.919853] ? retint_kernel+0x2d/0x2d [ 224.923780] ? userfaultfd_read+0x1270/0x1270 [ 224.928284] ? do_vfs_ioctl+0x75a/0xfe0 [ 224.932265] do_vfs_ioctl+0x75a/0xfe0 [ 224.936078] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 224.941709] ? check_preemption_disabled+0x35/0x240 [ 224.946747] ? ioctl_preallocate+0x1a0/0x1a0 [ 224.951156] ? SyS_ioctl+0xb/0xb0 [ 224.954624] ? security_file_ioctl+0x76/0xb0 [ 224.959125] ? security_file_ioctl+0x83/0xb0 [ 224.964584] SyS_ioctl+0x7f/0xb0 [ 224.967956] ? do_vfs_ioctl+0xfe0/0xfe0 [ 224.971940] do_syscall_64+0x1d5/0x640 [ 224.975838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.981029] RIP: 0033:0x45ca69 [ 224.984214] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.991925] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 224.999198] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 225.006468] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.013749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 225.021020] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 [ 225.028980] CPU: 0 PID: 10978 Comm: syz-executor.3 Not tainted 4.14.183-syzkaller #0 [ 225.036877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.046236] Call Trace: [ 225.048831] dump_stack+0x1b2/0x283 [ 225.052471] should_fail.cold+0x10a/0x154 [ 225.056629] __alloc_pages_nodemask+0x22b/0x2730 [ 225.061397] ? __lock_acquire+0x655/0x42a0 [ 225.065654] ? mark_held_locks+0xa6/0xf0 [ 225.069726] ? retint_kernel+0x2d/0x2d [ 225.073623] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.078473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 225.083242] ? retint_kernel+0x2d/0x2d [ 225.087145] alloc_pages_current+0xe7/0x1e0 [ 225.091476] pte_alloc_one+0x15/0x100 [ 225.095288] __pte_alloc+0x21/0x280 [ 225.098921] mfill_zeropage+0x8fe/0xce0 [ 225.102911] userfaultfd_ioctl+0x1542/0x2f70 [ 225.107324] ? retint_kernel+0x2d/0x2d [ 225.111217] ? get_pid_task+0x91/0x130 [ 225.115115] ? userfaultfd_read+0x1270/0x1270 [ 225.119610] ? lock_downgrade+0x6e0/0x6e0 [ 225.123759] ? lock_is_held_type+0x188/0x210 [ 225.128260] ? retint_kernel+0x2d/0x2d [ 225.132161] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 225.137186] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 225.141951] ? check_preemption_disabled+0x35/0x240 [ 225.146988] ? selinux_file_ioctl+0x2d0/0x560 [ 225.151534] ? userfaultfd_read+0x1270/0x1270 [ 225.156045] ? do_vfs_ioctl+0x75a/0xfe0 [ 225.160024] do_vfs_ioctl+0x75a/0xfe0 [ 225.163835] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 225.169470] ? ioctl_preallocate+0x1a0/0x1a0 [ 225.173896] ? security_file_ioctl+0x76/0xb0 [ 225.178319] ? security_file_ioctl+0x83/0xb0 [ 225.182733] SyS_ioctl+0x7f/0xb0 [ 225.186104] ? do_vfs_ioctl+0xfe0/0xfe0 [ 225.190084] do_syscall_64+0x1d5/0x640 [ 225.193982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.199174] RIP: 0033:0x45ca69 [ 225.202358] RSP: 002b:00007fd6d60acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.210067] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 225.217344] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 225.224617] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.232019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 225.239302] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007fd6d60ad6d4 15:31:29 executing program 4 (fault-call:5 fault-nth:1): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:29 executing program 0 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 225.324002] FAULT_INJECTION: forcing a failure. [ 225.324002] name failslab, interval 1, probability 0, space 0, times 0 [ 225.332312] FAULT_INJECTION: forcing a failure. [ 225.332312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.371699] CPU: 1 PID: 10987 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 225.379654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.389019] Call Trace: [ 225.391614] dump_stack+0x1b2/0x283 [ 225.395254] should_fail.cold+0x10a/0x154 [ 225.399411] should_failslab+0xd6/0x130 [ 225.403714] kmem_cache_alloc+0x28e/0x3c0 [ 225.407871] ptlock_alloc+0x1d/0x70 [ 225.411513] pte_alloc_one+0x57/0x100 [ 225.415321] __pte_alloc+0x21/0x280 [ 225.418953] mfill_zeropage+0x8fe/0xce0 [ 225.422940] userfaultfd_ioctl+0x1542/0x2f70 [ 225.427351] ? __might_fault+0x177/0x1b0 [ 225.431420] ? _copy_from_user+0x94/0x100 [ 225.435564] ? get_pid_task+0x91/0x130 [ 225.439452] ? userfaultfd_read+0x1270/0x1270 [ 225.443943] ? lock_downgrade+0x6e0/0x6e0 [ 225.448094] ? retint_kernel+0x2d/0x2d [ 225.451982] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 225.457001] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 225.461794] ? retint_kernel+0x2d/0x2d [ 225.465715] ? userfaultfd_read+0x1270/0x1270 [ 225.470220] ? userfaultfd_read+0x1270/0x1270 [ 225.474734] ? do_vfs_ioctl+0x75a/0xfe0 [ 225.478719] do_vfs_ioctl+0x75a/0xfe0 [ 225.482523] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 225.488150] ? check_preemption_disabled+0x35/0x240 [ 225.493176] ? ioctl_preallocate+0x1a0/0x1a0 [ 225.497599] ? security_file_ioctl+0x76/0xb0 [ 225.502000] ? security_file_ioctl+0x83/0xb0 [ 225.506406] SyS_ioctl+0x7f/0xb0 [ 225.509765] ? do_vfs_ioctl+0xfe0/0xfe0 [ 225.513739] do_syscall_64+0x1d5/0x640 [ 225.517625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.522806] RIP: 0033:0x45ca69 [ 225.526019] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.533807] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 225.541072] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 225.548333] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.555594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 225.562855] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 [ 225.570158] CPU: 0 PID: 10989 Comm: syz-executor.0 Not tainted 4.14.183-syzkaller #0 [ 225.578488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.587844] Call Trace: [ 225.590445] dump_stack+0x1b2/0x283 [ 225.594087] should_fail.cold+0x10a/0x154 [ 225.598249] __alloc_pages_nodemask+0x22b/0x2730 [ 225.603206] ? __lock_acquire+0x655/0x42a0 [ 225.607462] ? mark_held_locks+0xa6/0xf0 [ 225.611545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.616397] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 225.621421] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 225.626192] ? check_preemption_disabled+0x35/0x240 [ 225.631218] ? retint_kernel+0x2d/0x2d [ 225.635121] alloc_pages_current+0xe7/0x1e0 [ 225.639458] pte_alloc_one+0x15/0x100 [ 225.643273] __pte_alloc+0x21/0x280 [ 225.646999] mfill_zeropage+0x8fe/0xce0 [ 225.650992] userfaultfd_ioctl+0x1542/0x2f70 [ 225.655413] ? get_pid_task+0x91/0x130 [ 225.659314] ? userfaultfd_read+0x1270/0x1270 [ 225.663816] ? lock_downgrade+0x6e0/0x6e0 [ 225.667981] ? trace_hardirqs_on+0x10/0x10 15:31:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x120) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r4 = socket$inet(0x2, 0x80000, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getdents(r6, &(0x7f0000000480)=""/243, 0xf3) r7 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="02f5422e1300"/18, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x6c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r8, 0x81}, &(0x7f0000000240)=0x8) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x200000000000, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 225.672235] ? fsnotify+0x897/0x1110 [ 225.675954] ? __vfs_write+0xec/0x630 [ 225.679760] ? proc_tid_io_accounting+0x20/0x20 [ 225.684437] ? SyS_write+0x1b7/0x210 [ 225.688169] ? userfaultfd_read+0x1270/0x1270 [ 225.692673] ? do_vfs_ioctl+0x75a/0xfe0 [ 225.696657] do_vfs_ioctl+0x75a/0xfe0 [ 225.700457] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 225.705218] ? ioctl_preallocate+0x1a0/0x1a0 [ 225.709630] ? check_preemption_disabled+0x35/0x240 [ 225.714650] ? retint_kernel+0x2d/0x2d [ 225.720137] SyS_ioctl+0x7f/0xb0 15:31:29 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xedf}, {}], 0x2) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r2 = socket(0x2, 0x3, 0x20) accept$alg(r2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12050, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000200)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x717, 0x9, 0x7, 0x8001}, 0x14) [ 225.723533] ? do_vfs_ioctl+0xfe0/0xfe0 [ 225.727521] do_syscall_64+0x1d5/0x640 [ 225.731427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.736617] RIP: 0033:0x45ca69 [ 225.739808] RSP: 002b:00007f8793966c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.747520] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 225.754964] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 225.762238] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:31:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 225.769597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 225.776874] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f87939676d4 15:31:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:31:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x50000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)=@rose) 15:31:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) pkey_free(0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00\xe8@\xd3`gJ\x88\xd0\xfa\x91b\xf3\\\x80\xa9\xfc\x8e\x1b\f!\xb7t\xae\x06\x04\xbf\xde\x01\x00\x00\x00qB\x81r\x80\xf4/\xc3L\xb9\xf2\x83\xec\x02,\x80s\x8e\xaf\x8a3\xef+Q\xc9D\xde\xb6+\x93\x11\x16\x9b\xf4zE[\xb4K\xc1\xc8p\x87V\xc8]\xfbk\x1aj`\'8') mmap(&(0x7f0000701000/0x11000)=nil, 0x11000, 0x0, 0x12, r0, 0xffffe000) 15:31:30 executing program 4 (fault-call:5 fault-nth:2): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) timer_create(0x5, &(0x7f0000000100)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000000)="f5a0a703d87329232a5f42c74c7587624c1c2c75c313d9", &(0x7f0000000040)}}, &(0x7f0000000140)=0x0) timer_getoverrun(r2) 15:31:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x13c3, 0x12) modify_ldt$write2(0x11, &(0x7f0000000000)={0xce8, 0x0, 0x6400, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10400, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000040)=0x8, 0x4) 15:31:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0010000813e75aa56934b82252e53ede8cacdb75d1825d98e5e3ea7f150d69c4c57132a80273ba807", @ANYRES16=r5, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x44891}, 0x22048810) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x40000000000000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) write$P9_RUNLINKAT(r8, &(0x7f0000000200)={0x7, 0x4d, 0x659}, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 226.350450] FAULT_INJECTION: forcing a failure. [ 226.350450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0x10000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x3, 0x4, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0xa6}) accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x80800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000040)) 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 226.432828] CPU: 1 PID: 11046 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 226.440746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.450102] Call Trace: [ 226.452707] dump_stack+0x1b2/0x283 [ 226.456347] should_fail.cold+0x10a/0x154 [ 226.460521] __alloc_pages_nodemask+0x22b/0x2730 [ 226.465297] ? __read_once_size_nocheck.constprop.0+0x6/0x10 [ 226.471108] ? is_bpf_text_address+0x7c/0x120 [ 226.475622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 226.480478] ? lock_downgrade+0x6e0/0x6e0 [ 226.484645] ? is_bpf_text_address+0xa3/0x120 [ 226.489152] ? kernel_text_address+0x6e/0xe0 [ 226.494005] ? __kernel_text_address+0x9/0x30 [ 226.498516] ? unwind_get_return_address+0x51/0x90 [ 226.503457] ? __save_stack_trace+0x7b/0xd0 [ 226.507794] alloc_pages_vma+0xc1/0x4b0 [ 226.511781] shmem_alloc_page+0xe1/0x180 [ 226.515851] ? shmem_swapin+0x180/0x180 [ 226.519833] ? retint_kernel+0x2d/0x2d [ 226.523732] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 226.528761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 226.533528] ? check_preemption_disabled+0x35/0x240 [ 226.538566] ? retint_kernel+0x2d/0x2d [ 226.542467] ? shmem_mfill_atomic_pte+0x72/0x1780 [ 226.547320] shmem_mfill_atomic_pte+0x984/0x1780 [ 226.552088] ? __pte_alloc+0x198/0x280 [ 226.555987] ? shmem_file_llseek+0x220/0x220 [ 226.560410] ? lock_acquire+0x1ec/0x3f0 [ 226.564398] shmem_mfill_zeropage_pte+0x81/0xa0 [ 226.569083] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 226.573758] ? _raw_spin_unlock+0x29/0x40 [ 226.577921] ? __pte_alloc+0x19d/0x280 [ 226.581823] mfill_zeropage+0x7fe/0xce0 [ 226.585817] userfaultfd_ioctl+0x1542/0x2f70 [ 226.590239] ? get_pid_task+0x91/0x130 [ 226.594150] ? userfaultfd_read+0x1270/0x1270 [ 226.598743] ? lock_downgrade+0x6e0/0x6e0 [ 226.602899] ? get_pid_task+0x96/0x130 [ 226.606812] ? trace_hardirqs_on+0x10/0x10 [ 226.611057] ? retint_kernel+0x2d/0x2d [ 226.614955] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 226.619981] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 226.624749] ? userfaultfd_read+0x1270/0x1270 [ 226.629259] ? do_vfs_ioctl+0x75a/0xfe0 [ 226.633240] do_vfs_ioctl+0x75a/0xfe0 [ 226.637061] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 226.642696] ? ioctl_preallocate+0x1a0/0x1a0 [ 226.647120] ? security_file_ioctl+0x76/0xb0 [ 226.651577] ? security_file_ioctl+0x83/0xb0 [ 226.656525] SyS_ioctl+0x7f/0xb0 [ 226.659909] ? do_vfs_ioctl+0xfe0/0xfe0 [ 226.663895] do_syscall_64+0x1d5/0x640 [ 226.667801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 226.672992] RIP: 0033:0x45ca69 [ 226.676197] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000013c0)={r3, 0x3}, 0x8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$inet_sctp(r7, &(0x7f0000001380)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0xf0f, @remote, 0x7}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000180)="1b32b61bd6023e6b73c5dca8cf73de58576a8e77b27a1cbc602b7cf4774c27743c9d4c0772754a7dd3330b6b1f1c59a010d514ea4c2517cacbed781d81f97cfc11eb2348a5ef758188a5b491500a7177df60fb2f67e6ae28882cf0dc80a8e7a8e1dc814231003cd258a645b2385a3898a47ec5ecf707d06be2f64140b933ea6658c19ab589", 0x85}, {&(0x7f0000000240)="66633ce00a023843bfb6850011ffe53ed8830dc023d0b24574c63d5dd2bca281c6708b93f59af83fbb6a014798a6875b8c058b9c7de4f0345cc17bef59932bbb2632e102461aa8f792e7520cc9d4cc74e85639817bd6690599dbd55126773af1259175e6f3ea21d711c7662a872bca60304429e292b6a61ada8a3bdaa49ff8e49a44d0f0ccb75ff0fd9ef8e3e50c613faf4736af0ddfc66751cf1ba6893423e5c820028d0c5bb19723d4854f66c9b1add74c255b37eae8e3", 0xb8}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="e0a6682338766c4c3626b36f47cec3242701481f25d758f6defc1ab7c62deea4e0", 0x21}], 0x4, 0x0, 0x0, 0x20008010}, 0x4000004) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) [ 226.684028] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 226.691307] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 226.698583] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 226.705863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 226.713141] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:30 executing program 4 (fault-call:5 fault-nth:3): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0xee00) setfsuid(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f0000000100)="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", 0x1000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x81) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0xff, 0xff}, 'port0\x00', 0x8, 0x46, 0x5, 0x4, 0x4, 0x6, 0x1f, 0x0, 0x4, 0x8}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000340)={0xa00000, 0x6a49, 0x6a, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909d3, 0x4, [], @string=&(0x7f0000000000)=0x6e}}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 226.971987] FAULT_INJECTION: forcing a failure. [ 226.971987] name failslab, interval 1, probability 0, space 0, times 0 [ 226.983531] CPU: 0 PID: 11090 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 226.991419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.000779] Call Trace: [ 227.003383] dump_stack+0x1b2/0x283 [ 227.007029] should_fail.cold+0x10a/0x154 [ 227.011193] should_failslab+0xd6/0x130 [ 227.015182] kmem_cache_alloc+0x40/0x3c0 [ 227.019358] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 227.024998] __radix_tree_create+0x32b/0x4b0 [ 227.029420] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 227.034454] __radix_tree_insert+0x98/0x500 [ 227.038795] ? __radix_tree_create+0x4b0/0x4b0 [ 227.043392] ? shmem_add_to_page_cache+0x236/0x7f0 [ 227.048342] shmem_add_to_page_cache+0x552/0x7f0 [ 227.053116] ? shmem_alloc_and_acct_page+0x670/0x670 [ 227.058235] ? __radix_tree_preload+0x1c3/0x250 [ 227.062926] shmem_mfill_atomic_pte+0xc70/0x1780 [ 227.067710] ? shmem_file_llseek+0x220/0x220 [ 227.072127] ? lock_acquire+0x1ec/0x3f0 [ 227.076116] shmem_mfill_zeropage_pte+0x81/0xa0 [ 227.080881] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 227.085570] ? _raw_spin_unlock+0x29/0x40 [ 227.089754] ? __pte_alloc+0x19d/0x280 [ 227.093659] mfill_zeropage+0x7fe/0xce0 [ 227.097655] ? userfaultfd_ioctl+0x14ec/0x2f70 [ 227.102250] userfaultfd_ioctl+0x1542/0x2f70 [ 227.106673] ? __might_fault+0x177/0x1b0 [ 227.110748] ? _copy_from_user+0x94/0x100 [ 227.114904] ? get_pid_task+0x91/0x130 15:31:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000545000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xca, 0x2, 0x7) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() setregid(r1, r2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r3 = socket(0x15, 0x80000, 0x3b) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 15:31:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)='memory.events\x00', 0xe, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:30 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 227.118805] ? userfaultfd_read+0x1270/0x1270 [ 227.123305] ? lock_downgrade+0x6e0/0x6e0 [ 227.127478] ? trace_hardirqs_on+0x10/0x10 [ 227.131723] ? fsnotify+0x897/0x1110 [ 227.135444] ? __vfs_write+0xec/0x630 [ 227.139252] ? proc_tid_io_accounting+0x20/0x20 [ 227.143937] ? SyS_write+0x1b7/0x210 [ 227.147675] ? userfaultfd_read+0x1270/0x1270 [ 227.152185] ? do_vfs_ioctl+0x75a/0xfe0 [ 227.156171] do_vfs_ioctl+0x75a/0xfe0 [ 227.159982] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 227.165620] ? ioctl_preallocate+0x1a0/0x1a0 15:31:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000a6141bb622f58900000000000b0000000091a583ef28ae8b84"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r5, 0x318, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) [ 227.170052] ? security_file_ioctl+0x76/0xb0 [ 227.174480] ? security_file_ioctl+0x83/0xb0 [ 227.178900] SyS_ioctl+0x7f/0xb0 [ 227.182295] ? do_vfs_ioctl+0xfe0/0xfe0 [ 227.186280] do_syscall_64+0x1d5/0x640 [ 227.190186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 227.195383] RIP: 0033:0x45ca69 [ 227.198581] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.206298] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 227.213595] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 15:31:31 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 227.220894] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 227.228170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 227.235449] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/184, 0xb8}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000040)=""/23, 0x17}], 0x3, &(0x7f00000024c0)=[{&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/109, 0x6d}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/133, 0x85}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) bind$netlink(r2, &(0x7f0000002740)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000002700)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000002640)={@in={0x2, 0x4e20, @multicast1}, {&(0x7f0000002540)=""/191, 0xbf}, &(0x7f0000002600), 0x4}, 0xa0) 15:31:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r4, 0x1ff}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000040)={0x8, 0x3, 0x9, 0x4800, 0x12, "e9ea10b5a5b8c1c9"}) 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000000c0)=""/161, 0xfffffffffffffea1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x2) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x21c0, 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x0, @ipv4={[], [], @broadcast}, 0x6}}, 0xc1c, 0x4}, &(0x7f0000000000)=0x90) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401c5820, &(0x7f0000000040)) 15:31:33 executing program 4 (fault-call:5 fault-nth:4): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffb2d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000833000/0x1000)=nil, 0x1000}, 0x1}) 15:31:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)=']\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000420001002abd7000ffdbdf2500328e6111fa3beca7f5000000"], 0x14}}, 0x4000) 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') [ 229.736457] FAULT_INJECTION: forcing a failure. [ 229.736457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.807673] CPU: 1 PID: 11133 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 229.815596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.824957] Call Trace: [ 229.827557] dump_stack+0x1b2/0x283 [ 229.831291] should_fail.cold+0x10a/0x154 [ 229.835452] __alloc_pages_nodemask+0x22b/0x2730 [ 229.840233] ? trace_hardirqs_on+0x10/0x10 [ 229.844478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 229.849327] ? check_preemption_disabled+0x35/0x240 [ 229.854351] ? check_preemption_disabled+0x35/0x240 [ 229.859382] ? mark_held_locks+0xa6/0xf0 [ 229.863448] ? _raw_spin_unlock_irq+0x24/0x90 [ 229.867958] alloc_pages_vma+0xc1/0x4b0 [ 229.871950] shmem_alloc_page+0xe1/0x180 [ 229.876123] ? shmem_swapin+0x180/0x180 [ 229.880101] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 229.885127] ? firmware_map_remove+0x18f/0x18f [ 229.889721] ? ___preempt_schedule+0x16/0x18 [ 229.894146] ? preempt_schedule_common+0x4a/0xc0 [ 229.898915] ? ___preempt_schedule+0x16/0x18 [ 229.903346] shmem_mfill_atomic_pte+0x984/0x1780 [ 229.909077] ? shmem_file_llseek+0x220/0x220 [ 229.913491] ? lock_acquire+0x170/0x3f0 [ 229.917476] shmem_mfill_zeropage_pte+0x81/0xa0 [ 229.922153] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 229.926922] mfill_zeropage+0x7fe/0xce0 [ 229.930916] userfaultfd_ioctl+0x1542/0x2f70 [ 229.935328] ? __might_fault+0x177/0x1b0 [ 229.939397] ? _copy_from_user+0x94/0x100 [ 229.943550] ? get_pid_task+0x91/0x130 [ 229.947448] ? userfaultfd_read+0x1270/0x1270 [ 229.951956] ? lock_downgrade+0x6e0/0x6e0 [ 229.956114] ? retint_kernel+0x2d/0x2d [ 229.960015] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 229.965060] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.969825] ? check_preemption_disabled+0x35/0x240 [ 229.974846] ? retint_kernel+0x2d/0x2d [ 229.978738] ? __fget+0x1ff/0x360 [ 229.982210] ? userfaultfd_read+0x1270/0x1270 [ 229.986741] ? do_vfs_ioctl+0x75a/0xfe0 [ 229.990716] do_vfs_ioctl+0x75a/0xfe0 [ 229.994550] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 230.000188] ? ioctl_preallocate+0x1a0/0x1a0 [ 230.004621] ? security_file_ioctl+0x76/0xb0 [ 230.009048] ? security_file_ioctl+0x83/0xb0 [ 230.013459] SyS_ioctl+0x7f/0xb0 [ 230.016829] ? do_vfs_ioctl+0xfe0/0xfe0 [ 230.020811] do_syscall_64+0x1d5/0x640 [ 230.024712] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 230.029904] RIP: 0033:0x45ca69 [ 230.033093] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.040815] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 230.048094] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 15:31:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000340)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000240)='net/nf_conntrack\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x400086) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000380)={[0x8000, 0x3ff, 0xffff, 0x7, 0x4, 0x1, 0x7, 0x4, 0x10000, 0xffff7fff, 0x79, 0x2, 0x2, 0x40, 0x0, 0x1, 0x9, 0xb72f, 0x1, 0x2, 0x38de4b9f, 0x1ff, 0xfffff000, 0x80000001, 0x8, 0x5, 0x3, 0x8, 0x1, 0x40, 0x3, 0x8001, 0x80000001, 0x9, 0x4, 0x6, 0x2, 0x7, 0x5, 0x6, 0x0, 0x9, 0x8065, 0x3, 0xfffffff8, 0x3, 0x100, 0x3, 0x5, 0x2, 0x8, 0x80000000, 0x8001, 0x5, 0x7, 0x3, 0x2, 0x5, 0x5d0, 0x9, 0x10001, 0x80000000, 0x6, 0x3, 0x6, 0x4, 0x1f, 0x400, 0x0, 0x0, 0x4, 0xfffffffb, 0x9, 0x4, 0x3ff, 0x7, 0x8, 0x0, 0x7, 0x0, 0x7, 0x80000000, 0x2, 0xfffffffa, 0x3, 0x401, 0xffff, 0x7fffffff, 0x8, 0x1ffe, 0xfffffffa, 0x7, 0xf0f1, 0x7fff, 0x6, 0x8, 0x2, 0xfffeffff, 0x7, 0x1, 0xe4, 0x3, 0x5, 0xdc1, 0x401, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x101, 0x7, 0x7ff, 0x2, 0x7fff, 0x1, 0x20, 0x5, 0x10001, 0xa2a, 0xfffffffa, 0x8001, 0x6, 0xd77, 0x10001, 0x8000, 0xced, 0x40, 0x800, 0x0, 0x6, 0xac8c, 0x1, 0x9308, 0x7fffffff, 0x1, 0xa2e, 0x7, 0xffffff10, 0x816b, 0x5, 0x6, 0x40, 0x1, 0x10001, 0x72e2, 0x4, 0x8, 0x401, 0xc3e6, 0xfffffff7, 0x3, 0x2, 0xe19a, 0x7, 0xf8b, 0x9, 0x7, 0x1, 0x9, 0x5, 0x1736ef20, 0x7ff, 0x959, 0x4, 0x101, 0x81, 0x8a20, 0x5, 0x0, 0x800, 0x4, 0x1000, 0xfffffff9, 0x4, 0x3, 0x400, 0x2, 0xbd, 0x7fff, 0x81, 0x2, 0x40, 0x9, 0xffffff24, 0x9, 0xd55a, 0x8000, 0xae, 0x2, 0x287, 0x1000, 0x101, 0xffff, 0x2, 0x3, 0x9, 0x5, 0x1, 0x8001, 0x3e, 0x7, 0x6, 0x5d, 0x4, 0xffff, 0x5, 0x800, 0x6, 0xffffff00, 0x9, 0x4, 0x7, 0x7, 0x80000000, 0x3f, 0x80000001, 0x9, 0x96c, 0x3, 0xbefe, 0x1ff, 0x8001, 0x6, 0x0, 0x7fffffff, 0xea, 0x1ff, 0x2, 0x7fffffff, 0x3ff, 0x0, 0x81, 0x50e, 0x10000, 0xaca, 0x7ff, 0xffff2816, 0x1, 0x9, 0xdd, 0x4, 0x0, 0x5, 0x8, 0x6, 0x15f8, 0x4, 0x5, 0x1ff, 0x3ef, 0x7, 0x6, 0x1f, 0x8, 0x3, 0xd16, 0x0, 0x9, 0x1, 0x0, 0xffff, 0x5, 0x8, 0x7, 0x5, 0xffffffff, 0x10000, 0x40, 0x5d9f4707, 0x4, 0x5, 0x3, 0xff, 0x4, 0x6, 0x2, 0x80000001, 0x1ff, 0x1, 0x0, 0x1, 0x5, 0x1, 0x81, 0x0, 0xfffffff7, 0xfffffffe, 0x100, 0x2, 0xfffffff9, 0x80000000, 0x6df, 0x9, 0x20, 0x7ff, 0x7c, 0x7, 0x1ff, 0x8, 0x1000, 0x7, 0x2, 0x8, 0xfffffc00, 0x2, 0x9, 0xfffffffd, 0x1, 0x95, 0x8, 0x100, 0x9e, 0xcea0, 0xfffffffb, 0x0, 0x2, 0x8, 0x3, 0x0, 0x80000001, 0x7, 0x2, 0x0, 0x7, 0x3, 0x5, 0xfff, 0x855a, 0x4, 0x3, 0x1, 0x3, 0x3, 0x8, 0x5, 0x36, 0x7, 0x8000, 0x0, 0x8000, 0x1, 0x1, 0x0, 0x3b, 0x3, 0x3, 0x3, 0xfff, 0xfffffffc, 0xfff, 0x8, 0x8, 0x401, 0xfffffffa, 0x2, 0x4, 0x7, 0x8, 0x9, 0x4, 0xfffffffe, 0x1ff, 0xffff, 0x6, 0x8, 0x3, 0x8, 0xe7a7, 0x101, 0x80000001, 0x2, 0x2, 0x6b7b76f8, 0x1, 0x6, 0x9, 0xfffff2d1, 0x9, 0x0, 0x682, 0xab, 0x8, 0x6, 0x5, 0xfffffffe, 0x400, 0x0, 0x800, 0x1, 0x6cd0fb7b, 0x7, 0x9, 0x800, 0x2d2, 0x81, 0x1, 0xa85, 0x1, 0x3, 0x0, 0x6, 0x8, 0x1, 0x762, 0x5, 0x783, 0x2773, 0x1ff, 0x40, 0xf6fd, 0x5, 0x1, 0x8, 0x6, 0x3, 0x10, 0x5, 0x8, 0x2, 0x80000001, 0x2, 0xfffffff9, 0x3, 0x5, 0x0, 0xfffffffa, 0x800, 0x4, 0x7, 0x4, 0x7f, 0x9, 0x20, 0x7, 0x7fffffff, 0x9, 0x6, 0x7, 0x7ace, 0x8ffe, 0x80, 0x2, 0x1, 0x8000, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x875, 0x0, 0x800, 0xff, 0x0, 0xffff, 0x6, 0x1e7922f, 0x1, 0x9, 0x10000, 0x3, 0xbe5, 0x20, 0x1c00, 0xcb, 0x40, 0x3, 0x7, 0xff, 0x2, 0x7ff, 0x10001, 0x3, 0x8f, 0x99b9, 0x29, 0xfffffbff, 0x6, 0x9, 0xffffffff, 0x7, 0xfffffffa, 0x1f, 0x3, 0x4, 0x7, 0x5, 0x5f, 0x66, 0x9, 0x80, 0x9, 0x7, 0x7fff, 0x7, 0x0, 0xbc, 0x80000001, 0x3, 0x812, 0xa8aa, 0xa7a6, 0x7ff, 0xc0000000, 0x2000000, 0x7fffffff, 0x2, 0x5, 0x7dc90a, 0x702, 0x710cb1c1, 0x5, 0x1ff, 0x7, 0x6, 0x3, 0x8000, 0x3, 0x3, 0x0, 0x9, 0xd9, 0x2, 0x9, 0x2c6, 0x1ff, 0x5, 0x5, 0x1ff, 0xffff, 0x3f, 0xfffffff8, 0x4, 0x0, 0x4, 0x1, 0x4, 0x40, 0x22, 0x3, 0x4, 0x0, 0xf49, 0xaed4, 0x75e6378b, 0x1, 0x10000, 0x9, 0x3, 0x9, 0x8000, 0x9, 0x589, 0xfffffffc, 0x80000001, 0x3, 0x80000000, 0x7, 0x80, 0x40, 0xffff7fff, 0x4, 0x2, 0x8000, 0x6, 0x9, 0x20002, 0x3, 0x6, 0x2, 0x3, 0xce, 0xfffffffb, 0x3, 0x7, 0x0, 0x6, 0x4, 0x40, 0x19de, 0x3f, 0x3, 0x8, 0x1, 0x6d5, 0x80000, 0x8001, 0xfff, 0x11, 0x9, 0x7f, 0x9, 0x0, 0x92905620, 0x10000, 0x0, 0x6e, 0x7, 0x4a66, 0x7, 0x8, 0x90d0, 0x6, 0xfffffffa, 0xdc, 0x7, 0x9, 0x81, 0x4, 0x80000, 0x0, 0x6, 0x0, 0x9, 0x4690, 0x1, 0x2d3, 0x8, 0x9, 0x80000000, 0x80000000, 0x1000, 0x2, 0x80000000, 0xbb, 0x800, 0x81, 0x10000, 0x8001, 0x5, 0x45f, 0x4, 0x7ff, 0x8000, 0x0, 0x1, 0x7ff, 0x80000000, 0x100, 0x2, 0x3f, 0x82, 0x1ff, 0x4, 0x6a46, 0x3, 0x6, 0x378, 0xc9c, 0x1, 0x1, 0xff, 0x5, 0x90000000, 0x6, 0xffff, 0x7, 0x5, 0x6, 0x4, 0x80000000, 0x9, 0x968, 0x4, 0x7fffffff, 0xffff, 0x5, 0x2, 0xa13, 0xffff, 0x9e7, 0x40, 0x1f, 0x7ff, 0xc3d2, 0x62f9, 0x9, 0x7, 0x2, 0x8, 0x8, 0x80000001, 0x4, 0x6, 0x1ff, 0x81, 0x9, 0x7fffffff, 0x7, 0x40, 0x7, 0x1, 0x0, 0x1, 0xf5, 0x6, 0x51, 0x600, 0x5, 0x36a, 0x5505, 0x7, 0x62, 0x3, 0xa0, 0x80000001, 0x3, 0x2, 0x563, 0x6, 0x1c0, 0x38c, 0x2, 0x4, 0x5, 0x5, 0x1, 0x1ff, 0x2, 0xe15, 0x5, 0x5f0, 0x3, 0x4, 0x2, 0x3, 0x47a4, 0x8001, 0x400, 0x4, 0x0, 0x80000001, 0xfffffff9, 0x800, 0x8, 0x7, 0x3, 0x5, 0x10001, 0x3f, 0xffffff74, 0x80, 0x401, 0xad, 0x8000, 0x4, 0x4, 0x101, 0x1, 0x7, 0x10001, 0xb68, 0xf9, 0x798b, 0xfffffff9, 0x40, 0x800, 0x2, 0x2, 0x2edefc65, 0x1f, 0x5, 0x4, 0x3, 0x4, 0x2, 0x91, 0x7ff, 0x3e25, 0x1, 0x40, 0x8001, 0x3, 0x0, 0x6, 0x3d, 0x1, 0x1f, 0xfffffffd, 0x40, 0x400, 0x67, 0x9, 0x1, 0x3, 0x8, 0xfff, 0x281, 0x78, 0x4, 0x8001, 0x23, 0x3, 0xfffffff9, 0x281a, 0x0, 0x3, 0x7, 0x2, 0x6, 0xfff, 0x4, 0x101, 0xeb, 0xff, 0x3f, 0x15e, 0x4, 0x8, 0x4, 0x8, 0x5, 0x200, 0x10000000, 0x9, 0x10001, 0x8, 0x1ff, 0x6, 0x6, 0x40, 0x200, 0x7, 0xfffffff7, 0x5, 0x7, 0xfffffe00, 0x0, 0x20, 0x6, 0x6, 0x2, 0x0, 0x6, 0x80, 0x8, 0x2b73, 0x2, 0x2, 0x87, 0x4, 0x100, 0x5, 0x7c5, 0x2a8c, 0x10001, 0x0, 0x7fff, 0x2, 0x3, 0x1ff, 0x8000, 0x2, 0x3, 0x9, 0x6, 0xff, 0x4, 0x3, 0x7, 0x7fc000, 0x7f, 0x7, 0x400, 0x274, 0x6, 0x0, 0x10001, 0x6, 0x1ff, 0x5, 0x9, 0xee, 0x400000, 0x1ff, 0x3ff, 0x80000001, 0x4, 0x5, 0x2, 0x5, 0x1ff, 0x401, 0x4, 0x400, 0x5, 0x1, 0x0, 0x81, 0xfff, 0x40, 0x1, 0x8001, 0x59, 0x5, 0x6, 0x101, 0xda8, 0x5, 0x9e9, 0x6, 0x9, 0x101, 0xb5fe, 0x1, 0x101, 0x3, 0x3ff, 0x8001, 0xfc00, 0x2, 0x9, 0x1f, 0x1, 0x100, 0xda9, 0x3b9, 0x6, 0x101, 0x8, 0x7, 0x10000, 0x80, 0x20, 0x634, 0x7, 0xffffff80, 0x3, 0x5f, 0x6, 0x8000, 0x7, 0x4, 0x9, 0x0, 0x5d9, 0x4, 0x6, 0x8, 0x7ff, 0x392, 0x8001, 0x2, 0x370e0000, 0x7, 0xd822, 0x1, 0x8, 0x0, 0x5, 0x7f, 0x6, 0x20, 0x7fffffff, 0x0, 0x571, 0xff, 0x7ff, 0x8, 0xc5, 0xffffa235, 0xb1b3, 0x9, 0x1, 0xb64, 0x4, 0x8, 0x8, 0x7, 0x9, 0x9, 0x1, 0xfffffff8, 0xb183, 0xfffff801, 0x0, 0x7fff, 0x1, 0x0, 0x400, 0x7f, 0x5, 0x81, 0x1, 0x83, 0x7e7, 0x4, 0x1405, 0x6, 0x6, 0x9, 0x8, 0x7, 0x7, 0x8001, 0x7fffffff, 0x28, 0x4, 0x0, 0x4, 0x7ff, 0xb7, 0x0, 0x10000, 0x3e1, 0x1, 0xffffffce, 0x7, 0x40, 0x80000000, 0x10001, 0xd9, 0xffffffff, 0x1, 0xe1, 0x3b7, 0x8, 0x1, 0xd28, 0x3, 0xfffffffe, 0x4]}) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)) 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) [ 230.055388] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 230.062662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 230.069933] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x800, 0x0) fchdir(r1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 15:31:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = userfaultfd(0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:33 executing program 4 (fault-call:5 fault-nth:5): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)={0x4}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) accept(r4, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ff5aa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32, @ANYBLOB="0000000800ff", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES64, @ANYBLOB="5b11724a1c5a5c6bebe4e740c8afe1f513c764fb6bd247262614d14896f3c0aaa752b0431922dc48c4e0c1b0a06acf54e95b4f02c32c3a9d7c08214f6f25c8c15ec103e43f3d5e73c453aa4d63d2fb300312e221093c690af962336c8e28a704b87c52fb79f1e87a0f3bb3cf801ce99e774583cce71bfb96a5da498f52b1d5f24d97d778128551baab3dbb7c5edf83f568f3f139937f0737927587b675c03a9e92e6433ef2431d00e4b94796e683dc7bb8b7e5809840b705faee579ae44bf5ff81a1d43e2d73ede25ae9531fe48d7dc3b17797c1a06433af7cdde6176a66b91da5e44e246971ef5e5f974cdabc9187a3502af2eafaac364c6559706481d230ef3607e9a59d4dbf4d177c11822f8ab6c8f20aed996fa370fc24059380b8e945de743408635ddbe3dd53cf6a51f998b5d040c2b10922a0cfddfea507947fc79e6e216132ff5d183cdadbf4de1a13e757ee14c64643f70ece3bea4703077d69a4aeb0909cfa5dc3800d95dcc194cba7a1b0be58e49453091acb09662afee1c807a70e42a7f6413f359b22d53ed7de0a335229310133645a881394ff92376f343833661fe1451f02846b2e8db94c895859b2a3eddfbf5cfc626d44fdef31081095cfb86febe85c63a979f74ad4fbfb93fc5e16552f3583e8888740ac10de876fc7f81ac8df3cd8bb346301f4dbca6361f038ba0269692955011c459f6bc8bd9b2a85f9f4649b37c20cecda655e521b9fa1325507a344d823440c13514c033abb2f04718c35f7e24ad3f6f90ade4513113164e02daa820450a7418f7e060a33973d05343d1a82fd34ed3be431fb92d2b95f326f331b1b89aa21eb423ebb3c74316fb3ff8610629e5379b920d287ccb65e5fb776148b08cda5eaa622672458878c5248026f9bfeb62f51deabca16ca68b11cf1035d456b227bddb2a44324adfda6cb92132c164070c2ce4d673f4df60a6b653b464841ea81880c7dce61f94875305d122ef6e859b0447772a8f8cc704ef2af0d153b3bd30457fa4e5340da27add1854af5eece42bad5a233c5fb286fbd0b652feb0b0172bbdff2c6d989aa518a9dff821ffd405bad4655e5d68d35524b9917e23ddf74fddbeec707da32ff439d119e23d42945d0b8c6069ff566713090b77ee07c084ed65b15f950d4e02249accc2fd6482f5213f4f3af06d8dc59c29bbb3b8e302727142f3381539454967c6402a8953958d8b86848f7386753c0eac72af961beec2080060e509ebfb35240b5fc3dd3ec7f78e9e3b0823d758cb91ef03d5c930bb478bd9e860d5084b35f9691071f3e52355ca2835f56b8a6825e38945494df58596f0e4e3ffeb8946b47ca5fae1916cbe3439fae0296a2598ff5c5f016e11c6a138b3b62cb1080d8d2f6ae38559abe50bd317d1339f21d239217b831e123ae7bf721329d43e83733573398a4f53fcb4fcd5120743f4a205392d633a9e44fa36fffbc9d580fb399e3c5bf3e63e169cf5129c7d0618468bf52af2efbd69a6fb578045ec9b9404d464b0645f8a057af99a85c4526919079fb44afaa86aa9d05e9d9b2987b68f510f5a544a4165ec640348295c25ed63c205bb8f3a6b11c0635fe9ddd9db1dcad550b8ab356faa6f72e6aeef3e403cada054aa89ef96551e7601d0096017c3a8af111bc7c96edb62e4391d0253676f28cc1f1817f45314ff0398f716e50e64ca54a98f762bfd2690408936669bc0e61c8f91e8a1c37fe28be66902b57ec104498a9b8097ee77d52425fe48b0611426bb4a9bb4bef9c5e5f55479d1b952854f8f0ec9660483f155efc7337da923892f46b905076804d3e030931861491b8d2a981bc19814ddb4b6407f67e9957586de2cf815c92b0360d3013ef7f0b8dfccb285bd3bcff2cd7dbcd5be465a34646199e5c7413427376020405869ba5aace000683565284ee003523aa1f24e7190e46c2bddbe682db96efaf75a87e14f7929d4c9e44fb8eb83644c2ba290a27e3ad5577e34c4b72fbe4e7b125d7ab733dc93f19c42ada2acbe7a63280bea94d53aaf66fe991caee153f32a8f1bc73b9f73966a973df564618fcaa34f88672e84927b82f44deb2ecb74d86fd6266c68086e9c21cb266b8d2dc5cedfa6592520fa341cfc1c7d51e44c39cd8baafd56b9803c3b0c978042e6eab852e657f939ad27838abb44fa99219bf80d46af3dccb904aa087d1f32424bbbe4badec1d1ffc69573066d53f2316a97713cb61452461922593bb38f250592e885e6f62cbd13f3c3c0a0f051a78f64e17e508bcf009605cc479e35c8793a76a750c1af744d1d668f6cb434051a4aae55a22aa19734d8f23a3b766557657beac4119f9d11945faa7dbc7f422b55d96aabcb40ddf3270a20e85ac6795c5299851b7f4853e61bf8007b9645ad092bf6e89d4519244376a975be5cf12ec80df360e922b9ef9e9263f097b5510a3cacf984aedc918b06af6234f85fb0366844f686643b2f37d2bcd55ba648ab49d22fc0f56cc42add55b8393e9111f7b5ab2d9919bdbb05306fd40a590cf79b63c8a6a86aeb4dcd51f9e0f0408225f8451ffe8a1f4d891ead8728642354d58024fca11ae40f2bc746c53ad4b54556875ff7ef82d9590f4650dc12aaf67a467ff6fe2ae9b48cbe7bec4aa68ecd564910300f1b1d93f8e2c43053027e4f395576e4fecd80a28b8b30f2328cae56721c974c5fd6a25f8c0a587b210f2e7e77c119936d7d2e96ee34e4a0cc0985087a3a7ef4ff5715cc382978168c39713e9549e4bc30ad86c0cc7b9f88ac5fc642bd6b96ade27e4435c8a0a753c645c51b1692c92d0c7666112a582db13a1673a369c19a2aee7c55d5081318cd3d9741e06fddb72e7b2cfc1634b2a641855d6419283a4a378c7fc26db3e73742e9304d0e693078f65ec7dc7a7db0e5845c371f99dca3523291be1b09eaa5e11cea511f74e2fdb8ec82fb2d559425e8e4d3f3807c91e0f75b4b683e48b9ce0b6d9fea5bdee9525293cd59d3df03269ae14e32cc2b22a54307874111c46cef94c3e57443a650d104652aa84cb98bf629636e1fcb82f931c2861731193c87466a02c4325333d97889eb3e913139d0b8b07cdd671840c7a37498b86300172cd52b115de00d48d91b3ad0ac7ecc074a88a54727224f4d86238fbd357b143e118e1b13c5c9b655bf619f9bc82d1ca9d7f3523e88af37ff568d08108288613a32c9e54f4589c0e16fe903b570c7d7019048e11be437c83a3b3647137104b217857d068c5d8d6defaf6de7535373686fb2cd1b7ac982b60b6b5a5f30f45228b59d37907426b027a75f2dad9edf8b32b9d68c20e7bc5c9617d49334113179719180b35dcba1a94f36c53d3ac97b1c6d9b0ce4ab5115d928ece0d1180db15673818a1856fac5588bd912ce190bbe2fabfd023a418eb4d5c4c5dc49261453b4b79a32aa93b09bd24310587966cf37222528684e8d2f3da8e7a89a50d871dac17a8a4917099c8f785d8287379a62c392279cc598c175b7ecad6391f95b49fbca12b4ea0ec90859a5717892fd187e7ab61dafc952705da06420287246adff626a8ca8a4306e733da71dafb06020759db12f5f6f177ab148da923b2beeddf31c96841f2b186f6d4565765d742ff287b107d57e931505b2ec23c01b4b461bd9c1a7b921105a20d1b08eadccae24776bb76a73530dcae8da9a9a639168e9589c0b25604accff596e8f0e3d05e58bc1af4e3d9fb6443704e31915c267611f64b7494d8a11824427949162d7821d69d776c59dd0e1427f9ca321d4f2688c74f0aac9c9399692f3473befc45aa7c38535b91f710a5bb02b9f67a42c5ed5015fd4a237657aeee663bc2d199977c10afce495dbae907db0d40857cf5b938037ca4f21b3d566947c6a5cb6f9fb830e44965e75f238739ebb0372371815386aba65832faf83f294e62365449003a7f9a0fc31ec80a3a45d5164bd3bea45f7e5533508d8d8add84c249a38d89156236b5666bf8a71d89dde97d06f869f94b2fc8103dd37f2c545e6fcbe28db7c92897f8cdae1d3f6ee4191246298a980f87df459a64509f42894a61cf30a3e645b7bd37a6caed953e2270093be0b4d964738784c3c9f42b3f04515235ab3626086f571d55862c83aa1ad3cee9dbee117476e32ec7caacbc8fe437e18d2f3b363497c41862a03d0360c831012c3db038885ec2f4af7a6673291029b0f1de73110e35324123c295fce950087c391c4d1f6327668a222faa5fc4f202a8607decda05b34b65e40d5fd416fc278cecde9118cbec15f476abab23ab9d2a6395eb40e195b3590e41134ca51d4ac5ae36352a2ed77ac424a797e0cadfb3dfd746af13ca447d87f2cfd97dc7b003a9dd4f60ff0b54ec9b554a1a0bb44848d77dd50d8c93c110d55f9997257fe10750f497d0bc94f9ccafbc62ada443e8386f5c182e5d650ae983e648a2bd2cb137803cd87b45318f696a7c2486fbb6fe7f15228f32b50a30c94bca84eb4404a897ed83a390daf86309230c7e122247fe3d2bd970f7f7f7fc5140c5763e862363c41513901ad8e5dd6eae53aeec61f05a647501f6c225a11c59bc1ab0ca6f494c24756c213f10056e35ac43376e3729d48b682cbfb265634cdc493c27999c033dd30629a22baf092a2b3b13b5eeb9fc68af6656c15f9d8e5d76684e47d13ca33450592c1c8b6682a683046f0b8c36c2fccb392ce9f907c3c6548a74f2f1f49ab4e78eed17cb2b09847d800396c1f4ba1e194b70831acf9ec385d0e4bb32792f3b823488b5f97e0de647bc7bb8cb921dbe0b55b32beb1abccf7967bf808176af7e2e0e85a7ecec02c4883fb636d630470935fac9df65055a93c51fd0e81d2e1840db689229889baf5560915b08576b71580706b8663048a321fb01f1ba9b52902b174f7202fb8f067edb97db2ac7ddc8acae26e54433001e9d9aa5551d9b829f13ca6db0e2ab9c8a14a4dd80e3a5f6af4e9d77aa1857661875c65201c964f1e144a7595208aec4dada2f0b1106d4562be874b49458de61e4a1ee449eb3f2f219c499b19394729825ec206b18c8ae4465b45d014a0a909d74b8d9c42731a08820120447734937186beb2cdfada49d51b88db690ef6a03a630bcd0e26410f6960bb745a6374e14339a8bd9794790665625cc66e5c973f6da14c13f56fe8e0470af6884b98ce8551af237939d0f56614c55635d055435bbb7317f4b7b0e90b49de04bb3134929de705a472e1b6aebf3d1766118593e9fb51b5cbf2abf2af32dd74c78a9fc9e8923c44270d1b8649e5fdf3bc99b7468a0606099f002c2df7de7f38e002deaff60896490880717cadc1851801e28ecfce298b5cc535f6e626c28aa9e463b211a3bf250c92299d2d114ecabf01e7081c949ffa5c02b1bf5814f8cf7baf0fd8745af31c43f524f42f28a14e24c7d3a9aa855ba13b47ea93a1ce237f7918a29c9228a1b960caa641cfc9668ca5dab7b300625af9a64473568074740a08e8b94df331a1a0cd05cf8e39753caf2feba1d9b6897eca39111f327c119cc098a7526930255d9798197c5ae618ac5c66d7aa2b0a385f018e046c20790014afb003df14a1c1f60c53caeff4f11d0856ebbfa96239664f87d34df1813d69c65220df895a00e371ec202a47ca677f6854b9557cd5c2789a4e093bbd79038e6140e5d69d7211c558d62252230b9f8b5ad2ffdc4faf6ca6566e4f755a7d8ffe70a31915c86ba15857e470b2ce5bb77bad79902a64df4874b849671c5238a8c6c677dd7086ee284c5d806239cc3f61f482c55a46916e2cc78af4f61daf8a5"], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r8, 0x0) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x104000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fowner_gt={'fowner>', r7}}, {@uid_gt={'uid>', r8}}]}}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0a000400", @ANYRES16=r5, @ANYBLOB="02002cbd7000fbdbdf25130000000800a40003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) perf_event_open(&(0x7f0000000100)={0x232fa48fb23a70c4, 0x70, 0x2, 0x20, 0x8, 0x8, 0x0, 0xffff, 0x9, 0x7f1372e3cb61ff0d, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x16828, 0x2, 0x7, 0x1, 0x1, 0x8000, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/184, 0xb8}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000040)=""/23, 0x17}], 0x3, &(0x7f00000024c0)=[{&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/109, 0x6d}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/133, 0x85}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) bind$netlink(r2, &(0x7f0000002740)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000002700)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000002640)={@in={0x2, 0x4e20, @multicast1}, {&(0x7f0000002540)=""/191, 0xbf}, &(0x7f0000002600), 0x4}, 0xa0) [ 230.255155] FAULT_INJECTION: forcing a failure. [ 230.255155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.303086] CPU: 1 PID: 11177 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 230.311019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.320549] Call Trace: [ 230.323144] dump_stack+0x1b2/0x283 [ 230.326781] should_fail.cold+0x10a/0x154 [ 230.330935] __alloc_pages_nodemask+0x22b/0x2730 [ 230.335696] ? retint_kernel+0x2d/0x2d [ 230.339594] ? __lock_acquire+0x655/0x42a0 [ 230.343869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 230.349332] ? __lock_acquire+0x655/0x42a0 15:31:34 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 230.353585] ? __lock_acquire+0x655/0x42a0 [ 230.357833] ? trace_hardirqs_on+0x10/0x10 [ 230.362084] alloc_pages_vma+0xc1/0x4b0 [ 230.366069] shmem_alloc_page+0xe1/0x180 [ 230.370139] ? shmem_swapin+0x180/0x180 [ 230.374125] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 230.379157] ? lock_acquire+0x170/0x3f0 [ 230.383142] ? mem_cgroup_id_get_many+0x60/0x60 [ 230.387817] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 230.392853] ? lock_downgrade+0x6e0/0x6e0 [ 230.397016] ? do_raw_spin_unlock+0x164/0x250 15:31:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000100)={0x3, 0xb05, 0xffffffffffffff7f}) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x193400) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xa) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x41e000, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/4096, 0x1000) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000044) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000000)={0x5}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 230.401527] shmem_mfill_atomic_pte+0x984/0x1780 [ 230.406485] ? shmem_file_llseek+0x220/0x220 [ 230.410914] shmem_mfill_zeropage_pte+0x81/0xa0 [ 230.415597] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 230.420283] mfill_zeropage+0x7fe/0xce0 [ 230.424373] userfaultfd_ioctl+0x1542/0x2f70 [ 230.428788] ? __might_fault+0x177/0x1b0 [ 230.432863] ? _copy_from_user+0x94/0x100 [ 230.437020] ? get_pid_task+0x91/0x130 [ 230.440920] ? userfaultfd_read+0x1270/0x1270 [ 230.445425] ? lock_downgrade+0x6e0/0x6e0 [ 230.449590] ? trace_hardirqs_on+0x10/0x10 [ 230.453835] ? retint_kernel+0x2d/0x2d [ 230.457742] ? SyS_write+0x1b7/0x210 [ 230.461476] ? userfaultfd_read+0x1270/0x1270 [ 230.465987] ? do_vfs_ioctl+0x75a/0xfe0 [ 230.469974] do_vfs_ioctl+0x75a/0xfe0 [ 230.473788] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 230.479425] ? ioctl_preallocate+0x1a0/0x1a0 [ 230.483854] ? security_file_ioctl+0x76/0xb0 [ 230.488283] ? security_file_ioctl+0x83/0xb0 [ 230.492707] SyS_ioctl+0x7f/0xb0 [ 230.496085] ? do_vfs_ioctl+0xfe0/0xfe0 [ 230.500069] do_syscall_64+0x1d5/0x640 15:31:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000000207010300000000000000000a0000000c000340000000000000003b0c000340000f0000000000020c00024000000000000000070c000240000000000000000708000540000000020c00034000000000000000080900010073797a31000000000c0006400000000000000008"], 0x70}, 0x1, 0x0, 0x0, 0x30}, 0x20000081) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000200)={0xc2, 0x80}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0xbaf, @remote, 0x101}}, 0x4d00000, 0x400, 0x0, 0x5, 0x85, 0x5, 0xf9}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r8, 0x200, 0x8, [0xff, 0x6, 0x7ff, 0x0, 0x75d, 0x200, 0x1f, 0x81]}, &(0x7f0000000380)=0x18) [ 230.503977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 230.509180] RIP: 0033:0x45ca69 [ 230.512369] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.520111] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 230.527381] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 230.534663] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 230.541944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 15:31:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x428444}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4880}, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x3, 0x9, r3, 0x0, &(0x7f0000000040)={0x9a0916, 0x6, [], @string=&(0x7f0000000000)=0x7}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 230.549222] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402880, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x7105, "6686cc"}, 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) getpeername(r1, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x6d) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="d3b50000000000000005ff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x134, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8e}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3ff}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7ff}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x165b41a1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x29}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xbb}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1ff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7f}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xb}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x80}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xb862}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x55}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xff}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40021}, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) bind$rose(r1, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) recvmsg$can_raw(r4, &(0x7f0000000a80)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/162, 0xa2}], 0xa, &(0x7f0000000a00)=""/82, 0x52}, 0x2) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x900, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", ""]}, 0x14}}, 0x94) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) [ 230.678205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:34 executing program 4 (fault-call:5 fault-nth:6): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r8, 0x0, r7) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x1000003, 0x20010, r8, 0x763e000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x4, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) sendto$phonet(0xffffffffffffffff, &(0x7f0000000100)="451f4493c78be9444b81dabceb46a38c17fa99c61d4519e7e85882dee6f1b6fe20ce0fa3a606b49918c8de215a7fc80d8349b42ae2c71744464893a7e6f76bcb5eefaee8fc075262a42dd394ea3b30b999e4d0fd079d4af831c460d632be6c01b1c03382fc73ecadc9c538b7a1031258c25165aeba61eb09b34db05b429ef3ac69d7de7d810f7215f7206003461c9f6c8f04bdda55413041d31bbc28fc79cc29d5667f3802", 0xa5, 0x4000, &(0x7f00000001c0)={0x23, 0x8, 0x9, 0x1f}, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='\x00') [ 230.756603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:34 executing program 3: lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x8800) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x7, 0x3) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x1000, &(0x7f00000001c0)="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", 0x1000, 0x0, &(0x7f00000011c0)="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"}) [ 230.848656] FAULT_INJECTION: forcing a failure. [ 230.848656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.883660] CPU: 1 PID: 11239 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 230.891589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.900949] Call Trace: [ 230.903549] dump_stack+0x1b2/0x283 [ 230.907189] should_fail.cold+0x10a/0x154 [ 230.911346] __alloc_pages_nodemask+0x22b/0x2730 [ 230.916120] ? mark_held_locks+0xa6/0xf0 [ 230.920193] ? retint_kernel+0x2d/0x2d [ 230.924089] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 230.929118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 230.933971] ? check_preemption_disabled+0x35/0x240 [ 230.939050] ? policy_node+0x90/0x120 [ 230.942860] ? __sanitizer_cov_trace_pc+0x41/0x50 15:31:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x3}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006800000008000200000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 230.947717] alloc_pages_vma+0xc1/0x4b0 [ 230.951704] shmem_alloc_page+0xe1/0x180 [ 230.955773] ? shmem_swapin+0x180/0x180 [ 230.959759] ? check_preemption_disabled+0x35/0x240 [ 230.964874] ? retint_kernel+0x2d/0x2d [ 230.968774] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 230.973802] ? lock_downgrade+0x6e0/0x6e0 [ 230.977968] ? do_raw_spin_unlock+0x164/0x250 [ 230.982475] shmem_mfill_atomic_pte+0x984/0x1780 [ 230.987258] ? shmem_file_llseek+0x220/0x220 [ 230.991676] ? lock_acquire+0x170/0x3f0 [ 230.995676] shmem_mfill_zeropage_pte+0x81/0xa0 [ 231.000358] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 231.005044] mfill_zeropage+0x7fe/0xce0 [ 231.009647] userfaultfd_ioctl+0x1542/0x2f70 [ 231.014152] ? __might_fault+0x177/0x1b0 [ 231.018241] ? _copy_from_user+0x94/0x100 [ 231.022400] ? get_pid_task+0x91/0x130 [ 231.026305] ? userfaultfd_read+0x1270/0x1270 [ 231.030816] ? lock_downgrade+0x6e0/0x6e0 [ 231.034971] ? retint_kernel+0x2d/0x2d [ 231.038871] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 231.043912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.048685] ? check_preemption_disabled+0x35/0x240 [ 231.053731] ? selinux_file_ioctl+0x19a/0x560 [ 231.058253] ? selinux_file_ioctl+0x1ca/0x560 [ 231.062761] ? userfaultfd_read+0x1270/0x1270 [ 231.067269] ? do_vfs_ioctl+0x75a/0xfe0 [ 231.071254] do_vfs_ioctl+0x75a/0xfe0 [ 231.075070] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 231.080552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.080791] ? ioctl_preallocate+0x1a0/0x1a0 [ 231.080820] ? security_file_ioctl+0x76/0xb0 15:31:34 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={r2, 0x5, 0x9, 0x8ca, 0xfff9, 0x256, 0x100, 0x2, {r6, @in6={{0xa, 0x4e20, 0x7f, @remote, 0x1000}}, 0x4, 0x1ff, 0x1, 0x3}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={r7, 0xcb, "0f96df10247e2bfd05ae67d115c00d33ede770fac89c2c7e663094622dbb4507d01e86790b2b58de96394d93f63034560f6a9df6bc629241b49f2ef36e04cc7be6340888cc98fe7a537dcfab8cb68baf518b6af90001f0bf95e1ffdf766dada74677a1f92e382b965cf897c71bd1b8d2451e90884643422ec517db43741dca9bd3bfa1aeeda514fd8fd64a4df12a647b4229f9a8fd368a6241ff4ef9b5b628e168787a952b67630660cc1ecdb4dc4abb92a96d9eef04b94f0eaf7d718e4bd83a4c940d9e65bbd90000ceeb"}, &(0x7f0000000140)=0xd3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 231.098211] ? security_file_ioctl+0x83/0xb0 [ 231.102632] SyS_ioctl+0x7f/0xb0 [ 231.106017] ? do_vfs_ioctl+0xfe0/0xfe0 [ 231.110003] do_syscall_64+0x1d5/0x640 [ 231.113900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 231.119095] RIP: 0033:0x45ca69 [ 231.122293] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.130007] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 231.137281] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 231.144553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.151830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 231.159104] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:34 executing program 0: r0 = getpid() r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, r0, 0x8000, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)="a3c487bb819404a2e450d352f9c3e317db9ca2505300369edc740ef90cdce68f6f397cf9f2e87879b4ce2aa52859089774124e8ff13e9c3b1d63794b5aa315c2795e71", 0x43) [ 231.194111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:34 executing program 1: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)='\x1c\x00', &(0x7f0000000100)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x404a01, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r5, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000080)) 15:31:35 executing program 4 (fault-call:5 fault-nth:7): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)={0x82, 0xb, 0x4, 0x2000000, 0x2, {0x0, 0xea60}, {0x4, 0xc, 0x2, 0x81, 0x81, 0x48, "18b84195"}, 0x200, 0x1, @userptr=0x9, 0x8, 0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000340)="f105b6a4a99634f5d1db4286b897ce16b3eab3bf09f5afe86e66fdf69e0521ce170f41560eda2e8ca653ab844b7ebad0d63f66a7490816beeeaeb44b7543580ddc4d9b48e686c46b8c8ddcafdfac1d724b3e998f8e4111fe323a14cc2d5790e889de071a499056584370f218663dc5ff60a40e0ccfaac7d40075ba", 0x7b, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, r1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0x6) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000000)=""/83, &(0x7f0000000100)=0x53) [ 231.372870] FAULT_INJECTION: forcing a failure. [ 231.372870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.446812] CPU: 1 PID: 11282 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 231.454745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.464111] Call Trace: [ 231.466713] dump_stack+0x1b2/0x283 [ 231.470359] should_fail.cold+0x10a/0x154 [ 231.474519] __alloc_pages_nodemask+0x22b/0x2730 [ 231.479285] ? event_sched_in.isra.0+0x632/0xb90 [ 231.484056] ? trace_hardirqs_on+0x10/0x10 [ 231.488308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 231.493162] ? __lock_acquire+0x655/0x42a0 [ 231.497410] ? __lock_acquire+0x655/0x42a0 [ 231.501650] ? trace_hardirqs_on+0x10/0x10 [ 231.505893] alloc_pages_vma+0xc1/0x4b0 [ 231.509908] shmem_alloc_page+0xe1/0x180 [ 231.513977] ? shmem_swapin+0x180/0x180 [ 231.517958] ? __schedule+0x8ae/0x1d70 [ 231.522115] ? lock_acquire+0x170/0x3f0 [ 231.526095] ? mem_cgroup_id_get_many+0x60/0x60 [ 231.530768] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 231.535794] ? lock_downgrade+0x6e0/0x6e0 [ 231.539949] ? do_raw_spin_unlock+0x164/0x250 15:31:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x80000) recvfrom(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x2000, &(0x7f0000001180)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4) r2 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r4 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r2, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r5, @ANYBLOB="a45cddb69ce73002f9439329c3bb92960ac3cdc687bdbaee1434d5828b7d0eb1bc40704145d352365744e385e54d992f72bbddd49fb3cbb833786fb5443ca098f13673b206ef25311d7c512fe52d9cb8569867b9f9a0492f9bb9920dec2c40f304b797cce0a17db6ab8989ef2bdc7607de18fe9c96e5a59c06000000000000007544435397fc5c312daafc6269e4cc5184b5d0a3ce6f4fd3bca24c07630f28331768317dffbffc7f8c86cbfedbb32b303c10a7bcf337fe5c73a7ecaf451b66cbf3899fa53fa59a9bd515e67866a7124fcac2c880be4e8d776b65b595eef53a005d4efd3686883ab50deeea652d66afc15d500c8698d48b1d53c8137b348e229ded6afa85da8f7d5cd537486bc2c356c0dbcb6611628aa2251463bb09fcba0fa3a75da1d37b9a94749e26545aae7b7fe6023517e9c23ff80c64aa350220b177911be2302e7afacc6e55bec3d96ae84d4de579967984bd33700aa8b2389862845705ca0de82b420a8e0ea0588907273dce76541926043134ee9715b19c3ea3cde5784fc10a26bb47519bf03933a09276601fc0550911d603e530945deddeca00"/436, @ANYRES64, @ANYRESDEC=r3], 0x7, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="380000002400070500000040070226007bb2fc888a61a2a300050000000c458570ebb52842d71a964748942f886b4eed6939b48ada45168fc5637fa3f2bf2c382a96ffc4248df1290e9141cd2f5d556a6c771bbd675a3f69a2bb5f6973cacc3d4041ec0e779bf020dd9cbe59e30deb374042a01fa57e3bfc2422d5865fe9c8f70f5d2b54fbd9296e1702d9df5e5945df8f30bc6d24a5df7d24b40df259d0f7d6d055382643e00ffb61975a4989506d100387e0091ac5b32c80f70fd04775cff6d9a96ffc735e0579f9f1342622e282a5d136139d4e6716e3a0fcb75be804868964c19a31810dd57531c6", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x27}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) [ 231.544462] shmem_mfill_atomic_pte+0x984/0x1780 [ 231.549230] ? shmem_file_llseek+0x220/0x220 [ 231.553656] ? retint_kernel+0x2d/0x2d [ 231.557556] shmem_mfill_zeropage_pte+0x81/0xa0 [ 231.562235] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 231.566918] mfill_zeropage+0x7fe/0xce0 [ 231.570908] userfaultfd_ioctl+0x1542/0x2f70 [ 231.575327] ? mark_held_locks+0xa6/0xf0 [ 231.579393] ? retint_kernel+0x2d/0x2d [ 231.583291] ? userfaultfd_read+0x1270/0x1270 [ 231.583341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xa0000, 0x0, [0xffffffff7fffffff, 0x8, 0xdf4, 0x7f, 0x100, 0x3, 0x7, 0x3]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20200, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000263296f168bcfad7e705b784da6034728ca79cc9f6f4c9a4a8650434315ce4a41862cb6724d5fc70f9aa0a738639c1c2c4d6578b798e5605a6787bb0f9a962f061706"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="14030000240000022d00"/20, @ANYRES32=0x0, @ANYBLOB="0700f1ff0d0002000700ffff"], 0x314}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000001c0)='%\x00') [ 231.587795] ? retint_kernel+0x2d/0x2d [ 231.587807] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 231.587819] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.587829] ? check_preemption_disabled+0x35/0x240 [ 231.587849] ? selinux_file_ioctl+0x2b8/0x560 [ 231.619620] ? userfaultfd_read+0x1270/0x1270 [ 231.624124] ? do_vfs_ioctl+0x75a/0xfe0 [ 231.628103] do_vfs_ioctl+0x75a/0xfe0 [ 231.631999] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 231.637630] ? ioctl_preallocate+0x1a0/0x1a0 [ 231.642050] ? security_file_ioctl+0x76/0xb0 15:31:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000100)=""/112) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r5, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = fcntl$dupfd(r9, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x8, 0x188830, r10, 0x0) [ 231.645690] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.646456] ? security_file_ioctl+0x83/0xb0 [ 231.646467] SyS_ioctl+0x7f/0xb0 [ 231.646480] ? do_vfs_ioctl+0xfe0/0xfe0 [ 231.666854] do_syscall_64+0x1d5/0x640 [ 231.670760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 231.671205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.675945] RIP: 0033:0x45ca69 [ 231.675951] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:31:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) readv(r4, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000001100)=""/29, 0x1d}, {&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/180, 0xb4}, {&(0x7f0000002280)=""/146, 0x92}], 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4, r2, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000c34000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x2f, @broadcast, 0x4e20, 0x0, 'fo\x00', 0x6, 0x8, 0x4c}, 0x2c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r8, 0x0, r7) sync_file_range(r8, 0x7, 0x3, 0x6) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:35 executing program 4 (fault-call:5 fault-nth:8): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:35 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10ff6, 0x0, 0x0, 0x9}, r0, 0xb, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 231.675961] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 231.675967] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 231.675971] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.675975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 231.675980] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 [ 231.796062] FAULT_INJECTION: forcing a failure. [ 231.796062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.812388] CPU: 1 PID: 11325 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 231.815285] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.820301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.820306] Call Trace: [ 231.820326] dump_stack+0x1b2/0x283 [ 231.820344] should_fail.cold+0x10a/0x154 [ 231.848592] __alloc_pages_nodemask+0x22b/0x2730 [ 231.853525] ? perf_event_update_userpage+0x52f/0x760 [ 231.858723] ? lock_downgrade+0x6e0/0x6e0 [ 231.862876] ? __lock_acquire+0x655/0x42a0 [ 231.867112] ? perf_pmu_enable+0x36/0xf0 [ 231.867567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.871172] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 231.871181] ? event_sched_in.isra.0+0x632/0xb90 [ 231.871198] ? trace_hardirqs_on+0x10/0x10 [ 231.893570] ? lock_downgrade+0x6e0/0x6e0 [ 231.896417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.897722] alloc_pages_vma+0xc1/0x4b0 [ 231.897737] shmem_alloc_page+0xe1/0x180 [ 231.914417] ? shmem_swapin+0x180/0x180 [ 231.918399] ? _raw_spin_unlock_irq+0x24/0x90 [ 231.922901] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 231.927910] ? _raw_spin_unlock_irq+0x5a/0x90 [ 231.932433] ? finish_task_switch+0x178/0x610 [ 231.936915] ? finish_task_switch+0x14d/0x610 [ 231.941390] ? switch_mm_irqs_off+0x5f6/0xec0 [ 231.945869] ? __schedule+0x8ae/0x1d70 [ 231.949754] ? mark_held_locks+0xa6/0xf0 [ 231.953801] shmem_mfill_atomic_pte+0x984/0x1780 [ 231.958544] ? shmem_file_llseek+0x220/0x220 [ 231.962961] shmem_mfill_zeropage_pte+0x81/0xa0 [ 231.967690] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 231.972512] mfill_zeropage+0x7fe/0xce0 [ 231.976488] userfaultfd_ioctl+0x1542/0x2f70 [ 231.980886] ? lock_release+0x41e/0x7f0 [ 231.984845] ? userfaultfd_read+0x1270/0x1270 [ 231.989331] ? lock_downgrade+0x6e0/0x6e0 [ 231.993640] ? retint_kernel+0x2d/0x2d [ 231.997521] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 232.002625] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.007365] ? retint_kernel+0x2d/0x2d [ 232.011238] ? userfaultfd_read+0x1270/0x1270 [ 232.015732] ? do_vfs_ioctl+0x75a/0xfe0 [ 232.019685] do_vfs_ioctl+0x75a/0xfe0 [ 232.023487] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 232.029092] ? ioctl_preallocate+0x1a0/0x1a0 [ 232.033488] ? security_file_ioctl+0x76/0xb0 [ 232.037875] ? security_file_ioctl+0x83/0xb0 [ 232.042282] SyS_ioctl+0x7f/0xb0 [ 232.045672] ? do_vfs_ioctl+0xfe0/0xfe0 [ 232.049894] do_syscall_64+0x1d5/0x640 [ 232.053786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 232.058976] RIP: 0033:0x45ca69 [ 232.062173] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.069867] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 232.077115] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 232.084371] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:31:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) kexec_load(0xfffffffffffffffe, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="d8ef6b0f1a4c8d46c2f2895df9cdf721a955462351dd06723f724cdac054d1bb3d6b86f407fea5694f5e15e26ea438297ba95e7eeade5d8087d50f0a3cd67124703b0288f147533816a2e46c2d1dac389f012dc26a9caf73f6edc63825b1f555cd701127d0eee3c84ede696c067dea0802b64eede743a9e0fda7d8883fed32c978020e22afd30214732e7997c083e45361a0515b0487b4d45266f70c1c12201d3b7bee19f78b952666a4f0579a592ff40f1f58669d33090a83ab9943b9350d6923eebc", 0xc3, 0x80000001, 0x10001}, {&(0x7f0000000200)="c684ab67d06665fbe1eccd3f5e13c52510b75baf81e0049f38073e5774d535231ecee8a46f0302c3ced1a344039fd5521d8a01219e72cb60f9b2458dc1b014f098d4e36c520bc61289d759fe6d358fb290e2a35545f53c7b51795d9085ecbb64ff373889a1d2e48f9cf65f2ed12deeef018f209d8f14f9ed18c69159f4a86578bd84f21e2c13ea1b27585f07ca4040d4d37eaad7198cbd92f9b042eba5e13ca9649b60e63b33749b82950aa3ec2478c973ca8b2a2927e1a665f6bc4b4cf1a0a9bd", 0xc1, 0x2, 0x1cab}], 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000300)={0x8001000, 0x2, 0x5}) 15:31:35 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vhost_msg_v2(r2, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/174, 0xae, &(0x7f00000001c0)=""/4096, 0x3, 0x1}}, 0x48) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:35 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 232.091623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 232.098874] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:35 executing program 4 (fault-call:5 fault-nth:9): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}) [ 232.231271] FAULT_INJECTION: forcing a failure. [ 232.231271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r5 = accept(r4, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) connect$pptp(r3, &(0x7f0000000400)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r5, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r6], 0x7, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8ad7c8afc2"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000088}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/27, 0xffffffffffffff6b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/184, 0xbd}], 0x3, 0x0) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000700000/0x3000)=nil, 0x3000}) ioctl$VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000200)={0x18, 0x3, 0x97, 0x3}) [ 232.271603] CPU: 1 PID: 11354 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 232.279525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.288883] Call Trace: [ 232.291482] dump_stack+0x1b2/0x283 [ 232.295128] should_fail.cold+0x10a/0x154 [ 232.299292] __alloc_pages_nodemask+0x22b/0x2730 [ 232.304065] ? mark_held_locks+0xa6/0xf0 [ 232.308136] ? retint_kernel+0x2d/0x2d [ 232.312041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 232.316897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.321677] ? retint_kernel+0x2d/0x2d [ 232.325586] alloc_pages_vma+0xc1/0x4b0 [ 232.329576] shmem_alloc_page+0xe1/0x180 [ 232.333648] ? shmem_swapin+0x180/0x180 [ 232.337632] ? firmware_map_remove+0x18f/0x18f [ 232.342226] ? lock_acquire+0x170/0x3f0 [ 232.346238] ? ___preempt_schedule+0x16/0x18 [ 232.350654] ? preempt_schedule_common+0x4a/0xc0 [ 232.355422] ? ___preempt_schedule+0x16/0x18 [ 232.359852] shmem_mfill_atomic_pte+0x984/0x1780 [ 232.364627] ? shmem_file_llseek+0x220/0x220 [ 232.369043] ? retint_kernel+0x2d/0x2d [ 232.372947] shmem_mfill_zeropage_pte+0x81/0xa0 [ 232.377631] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 232.382315] mfill_zeropage+0x7fe/0xce0 [ 232.386308] userfaultfd_ioctl+0x1542/0x2f70 [ 232.390733] ? lock_release+0x41e/0x7f0 [ 232.394734] ? userfaultfd_read+0x1270/0x1270 [ 232.399361] ? lock_downgrade+0x6e0/0x6e0 [ 232.403521] ? retint_kernel+0x2d/0x2d [ 232.407417] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 232.412437] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.417201] ? retint_kernel+0x2d/0x2d 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write(r0, &(0x7f0000000040)="116278a2d740cd30a941fd1ce98971ce72601ac89b1d997e43808f38c6147d4699e39f81bf14845ee0f94c4b11568016", 0x30) [ 232.421106] ? userfaultfd_read+0x1270/0x1270 [ 232.425619] ? do_vfs_ioctl+0x75a/0xfe0 [ 232.429596] do_vfs_ioctl+0x75a/0xfe0 [ 232.433405] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 232.439042] ? ioctl_preallocate+0x1a0/0x1a0 [ 232.443468] ? security_file_ioctl+0x76/0xb0 [ 232.447898] ? security_file_ioctl+0x83/0xb0 [ 232.452318] SyS_ioctl+0x7f/0xb0 [ 232.455688] ? do_vfs_ioctl+0xfe0/0xfe0 [ 232.459669] do_syscall_64+0x1d5/0x640 [ 232.463568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 232.468810] RIP: 0033:0x45ca69 [ 232.472609] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.480324] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 232.487611] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 232.494902] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 232.502190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 232.509472] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 15:31:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x26) 15:31:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8, 0xfdfdffff]}) dup2(r5, r4) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', r8}) r9 = userfaultfd(0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000c34000)) 15:31:36 executing program 4 (fault-call:5 fault-nth:10): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="30788cf1373ec2e27654c7e10ba1633d29b529cde304fafeb44ede69911ff095fd2c348be63a979f5a582f483be975c3453be1596bbfd9eced3d5aeab69e0b3bebb71055edbc037f7b552c292a651ba22bedc209270b0fbd8822395387884eed22c2d871054eafa176c82a2b8a0a97720b2bf7abc73dc197f0e23dccb9b31bf8c10580b342088b3687250a1197dc02a4", 0x90, 0x0, &(0x7f0000618000)={0x2, 0x46a0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0xd35, 0xe91, 0x0, 0x7, 0x1ff}, 0x14) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', '/dev/ashmem\x00'}, &(0x7f0000000080)='/dev/ashmem\x00', 0xc, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') times(&(0x7f0000000000)) [ 232.733853] FAULT_INJECTION: forcing a failure. [ 232.733853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:31:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x2000000000000000, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000040)) [ 232.817242] CPU: 0 PID: 11401 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 232.825165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.834526] Call Trace: [ 232.837127] dump_stack+0x1b2/0x283 [ 232.840776] should_fail.cold+0x10a/0x154 [ 232.844939] __alloc_pages_nodemask+0x22b/0x2730 [ 232.849709] ? event_sched_in.isra.0+0x632/0xb90 [ 232.854483] ? mark_held_locks+0xa6/0xf0 [ 232.858561] ? __lock_acquire+0x655/0x42a0 [ 232.862798] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 232.867834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 232.873124] ? __lock_acquire+0x655/0x42a0 [ 232.877374] ? __lock_acquire+0x655/0x42a0 [ 232.881613] ? trace_hardirqs_on+0x10/0x10 [ 232.885852] alloc_pages_vma+0xc1/0x4b0 [ 232.889836] shmem_alloc_page+0xe1/0x180 [ 232.893907] ? shmem_swapin+0x180/0x180 [ 232.897884] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 232.902908] ? check_preemption_disabled+0x35/0x240 [ 232.907946] ? retint_kernel+0x2d/0x2d [ 232.911845] ? shmem_mfill_atomic_pte+0x10fc/0x1780 15:31:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040)={0x14}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000180)={0x32, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e22, 0x3, 'dh\x00', 0x5, 0xd9b4, 0x26}, 0x2c) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140f, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44801) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 232.916874] ? mark_held_locks+0xa6/0xf0 [ 232.920944] shmem_mfill_atomic_pte+0x984/0x1780 [ 232.925717] ? check_preemption_disabled+0x35/0x240 [ 232.930743] ? shmem_file_llseek+0x220/0x220 [ 232.935167] shmem_mfill_zeropage_pte+0x81/0xa0 [ 232.939846] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 232.944526] mfill_zeropage+0x7fe/0xce0 [ 232.948516] ? userfaultfd_ioctl+0xb15/0x2f70 [ 232.953028] userfaultfd_ioctl+0x1542/0x2f70 [ 232.957620] ? lock_release+0x41e/0x7f0 [ 232.961607] ? userfaultfd_read+0x1270/0x1270 15:31:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x0, [], [{0x1, 0x7fffffff, 0xe42, 0x29, 0x6, 0x9}, {0x2, 0x7f, 0x9, 0x4, 0x3, 0xffffffffffffd386}], [[], [], [], [], [], [], []]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 232.966109] ? lock_downgrade+0x6e0/0x6e0 [ 232.970274] ? trace_hardirqs_on+0x10/0x10 [ 232.974524] ? fsnotify+0x897/0x1110 [ 232.978245] ? __vfs_write+0xec/0x630 [ 232.982053] ? proc_tid_io_accounting+0x20/0x20 [ 232.986727] ? SyS_write+0x1b7/0x210 [ 232.990449] ? userfaultfd_read+0x1270/0x1270 [ 232.994961] ? do_vfs_ioctl+0x75a/0xfe0 [ 232.998939] do_vfs_ioctl+0x75a/0xfe0 [ 233.002745] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 233.007514] ? ioctl_preallocate+0x1a0/0x1a0 [ 233.011937] ? check_preemption_disabled+0x35/0x240 [ 233.016958] ? retint_kernel+0x2d/0x2d [ 233.020859] SyS_ioctl+0x7f/0xb0 [ 233.024227] ? do_vfs_ioctl+0xfe0/0xfe0 [ 233.028211] do_syscall_64+0x1d5/0x640 [ 233.032116] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 233.037314] RIP: 0033:0x45ca69 [ 233.040543] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.048260] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 233.055542] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 15:31:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 233.062907] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 233.070184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 233.077461] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 233.273394] cannot load conntrack support for proto=7 15:31:37 executing program 4 (fault-call:5 fault-nth:11): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x4100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$isdn(0x22, 0x3, 0x25) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)={0x2c, 0x1c, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @pad1, @generic={0x9, 0x58, "52ccb720825f2653e95bef905d3019c57b67fed2ad451ecbcf116ed6625557fb646a84821d9fcb7ef4373f4bbf66842378ffda9f9d764158a4dcc278c7317a60338dbc64c5d09fde102fa35d399fa91c0c7d7f2f742544f2"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x8, [0x9, 0xc7, 0x80000001, 0x8]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0xfc, 0x1, [0x5, 0x9, 0xffffffffffffff7f]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x20, 0xffff, [0xffffffff, 0x8, 0x800]}}, @pad1]}, 0xe8) 15:31:37 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x210100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}}, 0x20000811) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = dup(r0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0xf8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10101, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') inotify_init() mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockname$ax25(r1, &(0x7f0000000040)={{0x3, @rose}, [@null, @rose, @netrom, @default, @default, @null, @default, @rose]}, &(0x7f00000000c0)=0x48) [ 233.445510] FAULT_INJECTION: forcing a failure. [ 233.445510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.483301] CPU: 0 PID: 11475 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 233.491222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.500582] Call Trace: [ 233.503180] dump_stack+0x1b2/0x283 [ 233.506815] should_fail.cold+0x10a/0x154 [ 233.510977] __alloc_pages_nodemask+0x22b/0x2730 [ 233.515738] ? check_preemption_disabled+0x35/0x240 [ 233.520762] ? finish_task_switch+0x178/0x610 [ 233.525276] ? __lock_acquire+0x655/0x42a0 [ 233.529514] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 233.534535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 233.539384] ? __lock_acquire+0x655/0x42a0 [ 233.543628] ? __lock_acquire+0x655/0x42a0 [ 233.547974] ? trace_hardirqs_on+0x10/0x10 [ 233.552212] alloc_pages_vma+0xc1/0x4b0 [ 233.556190] shmem_alloc_page+0xe1/0x180 [ 233.560253] ? shmem_swapin+0x180/0x180 [ 233.564234] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 233.569252] ? lock_acquire+0x170/0x3f0 [ 233.573232] ? mem_cgroup_id_get_many+0x60/0x60 [ 233.577918] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 233.582947] ? lock_downgrade+0x6e0/0x6e0 [ 233.587138] ? do_raw_spin_unlock+0x164/0x250 [ 233.591641] shmem_mfill_atomic_pte+0x984/0x1780 [ 233.596414] ? shmem_file_llseek+0x220/0x220 [ 233.600841] ? shmem_mfill_zeropage_pte+0x58/0xa0 [ 233.605698] shmem_mfill_zeropage_pte+0x81/0xa0 [ 233.610467] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 233.615147] mfill_zeropage+0x7fe/0xce0 [ 233.619141] userfaultfd_ioctl+0x1542/0x2f70 [ 233.624521] ? check_preemption_disabled+0x35/0x240 [ 233.629557] ? retint_kernel+0x2d/0x2d [ 233.633464] ? get_pid_task+0x91/0x130 [ 233.637366] ? userfaultfd_read+0x1270/0x1270 [ 233.641869] ? retint_kernel+0x2d/0x2d [ 233.645763] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 233.650789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 233.655558] ? check_preemption_disabled+0x35/0x240 [ 233.660581] ? retint_kernel+0x2d/0x2d [ 233.664488] ? selinux_file_ioctl+0x83/0x560 [ 233.668904] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 233.673750] ? userfaultfd_read+0x1270/0x1270 [ 233.678252] ? do_vfs_ioctl+0x75a/0xfe0 [ 233.682233] do_vfs_ioctl+0x75a/0xfe0 [ 233.686044] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 233.691677] ? ioctl_preallocate+0x1a0/0x1a0 [ 233.696116] ? security_file_ioctl+0x76/0xb0 [ 233.700530] ? security_file_ioctl+0x83/0xb0 [ 233.704941] SyS_ioctl+0x7f/0xb0 [ 233.708310] ? do_vfs_ioctl+0xfe0/0xfe0 [ 233.712289] do_syscall_64+0x1d5/0x640 [ 233.716186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 233.721373] RIP: 0033:0x45ca69 [ 233.724564] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.732274] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 233.739544] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 233.746813] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 233.754083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 233.761357] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(r3, 0x540b, 0x0) 15:31:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:37 executing program 4 (fault-call:5 fault-nth:12): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 233.970652] FAULT_INJECTION: forcing a failure. [ 233.970652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.012519] CPU: 1 PID: 11500 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 234.020434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.029801] Call Trace: [ 234.032405] dump_stack+0x1b2/0x283 [ 234.036045] should_fail.cold+0x10a/0x154 [ 234.040206] __alloc_pages_nodemask+0x22b/0x2730 [ 234.044981] ? mark_held_locks+0xa6/0xf0 [ 234.049058] ? retint_kernel+0x2d/0x2d [ 234.052956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 234.057811] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 234.062576] ? retint_kernel+0x2d/0x2d [ 234.066479] alloc_pages_vma+0xc1/0x4b0 [ 234.070463] shmem_alloc_page+0xe1/0x180 [ 234.076703] ? shmem_swapin+0x180/0x180 [ 234.080682] ? retint_kernel+0x2d/0x2d [ 234.084578] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 234.089608] ? lock_release+0x41e/0x7f0 [ 234.093595] ? lock_downgrade+0x6e0/0x6e0 [ 234.097759] shmem_mfill_atomic_pte+0x984/0x1780 [ 234.102532] ? shmem_file_llseek+0x220/0x220 [ 234.106952] ? check_preemption_disabled+0x35/0x240 [ 234.111975] ? retint_kernel+0x2d/0x2d [ 234.115878] shmem_mfill_zeropage_pte+0x81/0xa0 [ 234.120561] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 234.125242] ? mfill_zeropage+0x24a/0xce0 [ 234.129405] mfill_zeropage+0x7fe/0xce0 [ 234.133403] userfaultfd_ioctl+0x1542/0x2f70 [ 234.137819] ? __might_fault+0x177/0x1b0 [ 234.141887] ? _copy_from_user+0x94/0x100 [ 234.146044] ? get_pid_task+0x91/0x130 [ 234.149942] ? userfaultfd_read+0x1270/0x1270 [ 234.154439] ? lock_downgrade+0x6e0/0x6e0 [ 234.158590] ? retint_kernel+0x2d/0x2d [ 234.162480] ? retint_kernel+0x2d/0x2d [ 234.166379] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 234.171408] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 234.176864] ? retint_kernel+0x2d/0x2d [ 234.180759] ? userfaultfd_read+0x1270/0x1270 [ 234.185272] ? userfaultfd_read+0x1270/0x1270 [ 234.189778] ? do_vfs_ioctl+0x75a/0xfe0 [ 234.193760] do_vfs_ioctl+0x75a/0xfe0 [ 234.197571] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 234.203206] ? ioctl_preallocate+0x1a0/0x1a0 [ 234.207632] ? security_file_ioctl+0x76/0xb0 [ 234.212046] ? security_file_ioctl+0x83/0xb0 [ 234.216461] SyS_ioctl+0x7f/0xb0 [ 234.219832] ? do_vfs_ioctl+0xfe0/0xfe0 [ 234.223813] do_syscall_64+0x1d5/0x640 [ 234.227712] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 234.232902] RIP: 0033:0x45ca69 [ 234.236088] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.243796] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 234.251066] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 15:31:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x4, 0x3ff, 0x100, r0, 0x0, &(0x7f0000000000)={0x990a92, 0x7, [], @value=0x89}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1) fcntl$dupfd(r6, 0x0, r4) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x7f, 0x7, 0x4, 0x20, 0x9, {0x77359400}, {0x5, 0x1, 0xd0, 0x4, 0x0, 0x2, "938cdace"}, 0x7, 0x1, @offset=0x4, 0xb9a, 0x0, r4}) ioctl$VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x7fff, 0xfffffffffffff000, 0x4e}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x20000, 0x0, {}, {0x1, 0x0, 0x3f, 0x1, 0xc2, 0x1f, "b7cfd651"}, 0x5, 0x4, @fd, 0x55, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') [ 234.258342] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 234.265968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 234.273247] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 15:31:38 executing program 3: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="866a7c2833d9e7bcf2cc476b11e0", 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r4 = accept(r3, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r4, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r7, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r5], 0x7, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bb060000", @ANYRES16=r5, @ANYBLOB="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"], 0x698}, 0x1, 0x0, 0x0, 0xc040}, 0x4004) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) 15:31:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x9, 0x2010, r0, 0x0) 15:31:38 executing program 4 (fault-call:5 fault-nth:13): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 234.877058] FAULT_INJECTION: forcing a failure. [ 234.877058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.899982] CPU: 1 PID: 11546 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 234.907899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.917263] Call Trace: [ 234.919865] dump_stack+0x1b2/0x283 15:31:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000000)={{0x0, 0x0, 0x8000, 0x3, 0x5}, 0x0, 0x5, 0x80000001}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) dup(r4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 234.923504] should_fail.cold+0x10a/0x154 [ 234.927779] __alloc_pages_nodemask+0x22b/0x2730 [ 234.932548] ? finish_task_switch+0x178/0x610 [ 234.937050] ? __lock_acquire+0x655/0x42a0 [ 234.941294] ? __lock_acquire+0x655/0x42a0 [ 234.945547] ? mark_held_locks+0xa6/0xf0 [ 234.949659] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 234.954711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 234.959566] ? __lock_acquire+0x655/0x42a0 [ 234.963811] ? __lock_acquire+0x655/0x42a0 [ 234.968060] ? trace_hardirqs_on+0x10/0x10 [ 234.972305] alloc_pages_vma+0xc1/0x4b0 [ 234.976290] shmem_alloc_page+0xe1/0x180 [ 234.980361] ? shmem_swapin+0x180/0x180 [ 234.984343] ? lock_acquire+0x170/0x3f0 [ 234.988329] ? mem_cgroup_id_get_many+0x60/0x60 [ 234.993005] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 234.998029] ? lock_downgrade+0x6e0/0x6e0 [ 235.002188] ? do_raw_spin_unlock+0x164/0x250 [ 235.006695] shmem_mfill_atomic_pte+0x984/0x1780 [ 235.011463] ? shmem_file_llseek+0x220/0x220 [ 235.015870] ? retint_kernel+0x2d/0x2d [ 235.019777] shmem_mfill_zeropage_pte+0x81/0xa0 [ 235.024455] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 235.029133] mfill_zeropage+0x7fe/0xce0 [ 235.033131] userfaultfd_ioctl+0x1542/0x2f70 [ 235.037558] ? __might_fault+0x177/0x1b0 [ 235.041628] ? _copy_from_user+0x94/0x100 [ 235.045800] ? get_pid_task+0x91/0x130 [ 235.049708] ? userfaultfd_read+0x1270/0x1270 [ 235.054217] ? lock_downgrade+0x6e0/0x6e0 [ 235.058373] ? retint_kernel+0x2d/0x2d [ 235.062267] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.067426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 235.072186] ? check_preemption_disabled+0x35/0x240 15:31:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 235.077216] ? selinux_file_ioctl+0x19a/0x560 [ 235.082415] ? selinux_file_ioctl+0x1df/0x560 [ 235.086915] ? userfaultfd_read+0x1270/0x1270 [ 235.091420] ? do_vfs_ioctl+0x75a/0xfe0 [ 235.095400] do_vfs_ioctl+0x75a/0xfe0 [ 235.099215] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 235.104851] ? ioctl_preallocate+0x1a0/0x1a0 [ 235.109277] ? security_file_ioctl+0x76/0xb0 [ 235.113688] ? security_file_ioctl+0x83/0xb0 [ 235.118103] SyS_ioctl+0x7f/0xb0 [ 235.121482] ? do_vfs_ioctl+0xfe0/0xfe0 15:31:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r0) finit_module(r0, &(0x7f0000000040)='/dev/ashmem\x00', 0x2) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) msgget(0x3, 0x208) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000080)="dc30930b99391b016764879447900ee84f116613eded1293f278ffb7fcd43bc4654d44753c05110bef9af5fa1792159f7734b5851a81181a49cab9dda6bb0f4f038bd3d8a452cd600f1716c2ad46bc7a35ad19cef429dd9e4d012aa5766b9808cc3dc97a931e7a84d67698240fae18045e88567ff301ae44c6d7ebb88bf4f1e3b83a7f01739bb2dc340315d2a6be3ee426c45d4a8d750395514eebbeb31d2b5359fc4545ed9aac20d5125142cf46538b4d9cf6fefab9dbbbb61dace935468dbf4e249bb9124f08d4598e1bc290e47626f20b") 15:31:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1485, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r7, 0x9, 0x18, 0x4}, &(0x7f0000000040)=0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 235.125469] do_syscall_64+0x1d5/0x640 [ 235.129368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.134554] RIP: 0033:0x45ca69 [ 235.137828] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.145540] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 235.152812] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 235.160097] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 235.167370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 235.174666] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:38 executing program 4 (fault-call:5 fault-nth:14): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) r3 = dup2(r2, r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100)=0x800, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14602900}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000007000fedbdf25120000000c005900010000000000000000000000100000293358d5e2c144cfdac8d7a475e5aafbed575dac82f3a822cb35de652a9681a29e0d3e3ec7f288580f27919b29f4f2df1086690ee271c3754778645ee2477fc7820882b991a9ddef84563fbb77c4f0193c13debb929f0fbb745845c2e828214e59d62920d08cfd8aa782fc243c5150467dba0a05d71420714bed721fd3b44c89813e82088751e6e83c7cd668e5ce12d04a9b"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004010) r7 = fcntl$dupfd(r5, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGID(r8, 0x80084502, &(0x7f0000000340)=""/146) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x4012, r0, 0x0) 15:31:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_mr_cache\x00') ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000040)={0x5b, &(0x7f0000000100)=""/91}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) [ 235.301575] FAULT_INJECTION: forcing a failure. [ 235.301575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.334245] CPU: 1 PID: 11573 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 235.342163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.351635] Call Trace: [ 235.354241] dump_stack+0x1b2/0x283 [ 235.357885] should_fail.cold+0x10a/0x154 [ 235.362068] __alloc_pages_nodemask+0x22b/0x2730 [ 235.366845] ? __lock_acquire+0x655/0x42a0 [ 235.371091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 235.375946] ? __lock_acquire+0x655/0x42a0 [ 235.380194] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.385221] ? __lock_acquire+0x655/0x42a0 [ 235.389466] ? trace_hardirqs_on+0x10/0x10 [ 235.393752] alloc_pages_vma+0xc1/0x4b0 [ 235.397738] shmem_alloc_page+0xe1/0x180 [ 235.401808] ? shmem_swapin+0x180/0x180 [ 235.405795] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.410830] ? lock_acquire+0x170/0x3f0 [ 235.414819] ? mem_cgroup_id_get_many+0x60/0x60 [ 235.419506] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 235.424540] ? lock_downgrade+0x6e0/0x6e0 [ 235.428701] ? do_raw_spin_unlock+0x164/0x250 [ 235.433205] shmem_mfill_atomic_pte+0x984/0x1780 [ 235.437977] ? shmem_file_llseek+0x220/0x220 [ 235.442404] shmem_mfill_zeropage_pte+0x81/0xa0 [ 235.447086] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 235.451768] mfill_zeropage+0x7fe/0xce0 [ 235.455760] ? userfaultfd_ioctl+0xb15/0x2f70 [ 235.460268] userfaultfd_ioctl+0x1542/0x2f70 [ 235.464693] ? __might_fault+0x177/0x1b0 [ 235.468767] ? _copy_from_user+0x94/0x100 [ 235.472924] ? get_pid_task+0x91/0x130 [ 235.476827] ? userfaultfd_read+0x1270/0x1270 [ 235.481335] ? lock_downgrade+0x6e0/0x6e0 [ 235.485489] ? retint_kernel+0x2d/0x2d [ 235.489385] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.494412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 235.499181] ? check_preemption_disabled+0x35/0x240 [ 235.504219] ? selinux_file_ioctl+0x19a/0x560 [ 235.508729] ? selinux_file_ioctl+0x1f1/0x560 [ 235.513233] ? userfaultfd_read+0x1270/0x1270 [ 235.517825] ? do_vfs_ioctl+0x75a/0xfe0 [ 235.521804] do_vfs_ioctl+0x75a/0xfe0 [ 235.525615] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 235.531248] ? ioctl_preallocate+0x1a0/0x1a0 [ 235.535678] ? security_file_ioctl+0x76/0xb0 [ 235.540104] ? security_file_ioctl+0x83/0xb0 [ 235.544520] SyS_ioctl+0x7f/0xb0 [ 235.547893] ? do_vfs_ioctl+0xfe0/0xfe0 [ 235.551877] do_syscall_64+0x1d5/0x640 [ 235.555778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.560972] RIP: 0033:0x45ca69 [ 235.564161] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.571875] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 235.579153] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 235.586431] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 235.593704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 235.600983] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:39 executing program 4 (fault-call:5 fault-nth:15): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fstatfs(r0, &(0x7f0000000040)=""/48) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x167, 0x3, 0x6, 0x5, 0x4}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) [ 235.738014] FAULT_INJECTION: forcing a failure. [ 235.738014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.773157] CPU: 1 PID: 11589 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 235.781075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.790447] Call Trace: [ 235.793049] dump_stack+0x1b2/0x283 [ 235.796693] should_fail.cold+0x10a/0x154 [ 235.800861] __alloc_pages_nodemask+0x22b/0x2730 [ 235.805633] ? mark_held_locks+0xa6/0xf0 [ 235.809705] ? __lock_acquire+0x655/0x42a0 [ 235.813948] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.818987] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 235.823847] ? __lock_acquire+0x655/0x42a0 [ 235.828098] ? __lock_acquire+0x655/0x42a0 [ 235.832345] ? mark_held_locks+0xa6/0xf0 [ 235.836417] alloc_pages_vma+0xc1/0x4b0 [ 235.840405] shmem_alloc_page+0xe1/0x180 [ 235.844492] ? shmem_swapin+0x180/0x180 [ 235.848494] ? retint_kernel+0x2d/0x2d [ 235.852660] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 235.857692] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 235.862727] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 235.867763] ? lock_downgrade+0x6e0/0x6e0 [ 235.871928] ? do_raw_spin_unlock+0x164/0x250 [ 235.876454] shmem_mfill_atomic_pte+0x984/0x1780 [ 235.881236] ? shmem_file_llseek+0x220/0x220 [ 235.885660] ? retint_kernel+0x2d/0x2d [ 235.889563] shmem_mfill_zeropage_pte+0x81/0xa0 [ 235.894255] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 235.898941] mfill_zeropage+0x7fe/0xce0 [ 235.902939] userfaultfd_ioctl+0x1542/0x2f70 [ 235.907358] ? mark_held_locks+0xa6/0xf0 [ 235.911432] ? retint_kernel+0x2d/0x2d [ 235.915372] ? userfaultfd_read+0x1270/0x1270 [ 235.919876] ? retint_kernel+0x2d/0x2d [ 235.923776] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 235.928800] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 235.933569] ? check_preemption_disabled+0x35/0x240 15:31:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="c870b3001f0468831e790b1b592dd5f5ce2e749426e3a740786fe7329a14dd642f2226819e78be2229adbcbfe764d9040f97586f461fca", @ANYRES16=r1, @ANYBLOB="020028bd7000fedbdf250300000014000600626174616476300000000000000000001400030000000000000000000000000000000001080004007f00000114000200fe880000000000000000000000000001140006006d6163766c616e30000000000000000014000200ff02000000000000000000000000000108000500e000000114000300fe8000000000000000000000000000bb2b00070073797374656d5f753a6f626a6563745f723a64686370645f756e69745f66696c655f743a73300000"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) recvfrom$rose(r2, &(0x7f00000002c0)=""/138, 0x8a, 0x20, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xe8, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 235.938607] ? selinux_file_ioctl+0x2d0/0x560 [ 235.943117] ? userfaultfd_read+0x1270/0x1270 [ 235.947730] ? do_vfs_ioctl+0x75a/0xfe0 [ 235.951715] do_vfs_ioctl+0x75a/0xfe0 [ 235.955532] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 235.961171] ? ioctl_preallocate+0x1a0/0x1a0 [ 235.965599] ? security_file_ioctl+0x76/0xb0 [ 235.970021] ? security_file_ioctl+0x83/0xb0 [ 235.974439] SyS_ioctl+0x7f/0xb0 [ 235.977817] ? do_vfs_ioctl+0xfe0/0xfe0 [ 235.981802] do_syscall_64+0x1d5/0x640 15:31:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8, 0x101}, {0x0, 0xd9}]}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 235.985704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.990902] RIP: 0033:0x45ca69 [ 235.994095] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.001808] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 236.009084] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 236.016365] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 236.023647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 236.030922] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000140)={0x2, 0x70, 0x3, 0xd4, 0xe4, 0x0, 0x0, 0x8, 0x1000, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x1f}, 0xa400, 0x7f, 0x80000000, 0x5, 0x5, 0x3, 0x9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x541000, 0x0) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000340)={0x6, 0x7fff, 0x10000, 0x100000, r8}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x9, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 15:31:41 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0x9, 0x2, {0x8, @sdr={0x56555959, 0x1}}, 0x4}) 15:31:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x7fff, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:41 executing program 4 (fault-call:5 fault-nth:16): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pread64(r6, &(0x7f0000000240)=""/71, 0x47, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r7, 0x10, 0x1, @ib={0x1b, 0x6, 0x3, {"a24efb7f1a693b0101f3d5dac02840eb"}, 0x6, 0x1, 0xfffffffffffffe00}}}, 0xa0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:42 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'vlan1\x00', {0x2, 0x4e21, @local}}) syz_open_pts(0xffffffffffffffff, 0x0) r6 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x8) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000000c0)={0x0, 0x6}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, r7}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f00000001c0)={r7}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)={r7}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000005, 0x12, r4, 0xbabdc000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$inet(r3, 0x0, &(0x7f0000000040)) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) 15:31:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/d\tv/a3hmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 238.298035] audit: type=1400 audit(1591543902.032:51): avc: denied { create } for pid=11627 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 238.351070] FAULT_INJECTION: forcing a failure. [ 238.351070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.398511] CPU: 1 PID: 11628 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 238.406869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.416230] Call Trace: [ 238.419058] dump_stack+0x1b2/0x283 [ 238.422705] should_fail.cold+0x10a/0x154 [ 238.426864] __alloc_pages_nodemask+0x22b/0x2730 [ 238.431638] ? mark_held_locks+0xa6/0xf0 [ 238.435731] ? __lock_acquire+0x655/0x42a0 [ 238.441591] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 238.446634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 238.451580] ? __lock_acquire+0x655/0x42a0 [ 238.455843] ? __lock_acquire+0x655/0x42a0 [ 238.460135] ? trace_hardirqs_on+0x10/0x10 [ 238.464407] alloc_pages_vma+0xc1/0x4b0 [ 238.468424] shmem_alloc_page+0xe1/0x180 [ 238.472514] ? shmem_swapin+0x180/0x180 [ 238.476510] ? lock_acquire+0x170/0x3f0 [ 238.480508] ? mem_cgroup_id_get_many+0x60/0x60 [ 238.485653] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 238.490696] ? lock_downgrade+0x6e0/0x6e0 15:31:42 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x90d90, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8}, 0x354f6c639c738ab7, 0x100000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0xb800000000000000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001100ffdb712508004f000400000008004b006b0000107b004b00"/40], 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000a6141bb622f58900000000000b0000000091a583ef28ae8b84"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x3c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x18, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4880) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) [ 238.494861] ? do_raw_spin_unlock+0x164/0x250 [ 238.499378] shmem_mfill_atomic_pte+0x984/0x1780 [ 238.504152] ? shmem_file_llseek+0x220/0x220 [ 238.508579] shmem_mfill_zeropage_pte+0x81/0xa0 [ 238.513522] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 238.518215] mfill_zeropage+0x7fe/0xce0 [ 238.522211] userfaultfd_ioctl+0x1542/0x2f70 [ 238.526631] ? retint_kernel+0x2d/0x2d [ 238.530529] ? get_pid_task+0x91/0x130 [ 238.534431] ? userfaultfd_read+0x1270/0x1270 [ 238.535831] audit: type=1400 audit(1591543902.032:52): avc: denied { ioctl } for pid=11627 comm="syz-executor.5" path="socket:[39653]" dev="sockfs" ino=39653 ioctlcmd=0x64c9 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 238.538954] ? lock_downgrade+0x6e0/0x6e0 [ 238.538967] ? retint_kernel+0x2d/0x2d [ 238.538975] ? retint_kernel+0x2d/0x2d [ 238.538987] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 238.581311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 238.586078] ? retint_kernel+0x2d/0x2d [ 238.589988] ? userfaultfd_read+0x1270/0x1270 [ 238.594501] ? do_vfs_ioctl+0x75a/0xfe0 15:31:42 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={r5, 0x59, "31ec3366157895e5e6156f538c0edf51cf7c4777c1b15bae77d32b1e7cd282ea7b2cf7dba8814bbd5fa1f5bc324a20d72414b0daf36469f1d7faec0ed182980b157ea17ae0087c0c09329596e6db0c3a6461c7aea75c16e214"}, &(0x7f00000003c0)=0x61) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={r6, 0x6}, &(0x7f0000000440)=0x8) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c3000125bd70040000002501000800000200000141000000050000000000d49e800c537c932e41000000f0000e00703a73797a3100000000d81584cf817fc4b63706ccedc8b201042e8adf03d05ec982"], 0x34}, 0x1, 0x0, 0x0, 0x60000880}, 0xc051) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x228000, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r4, 0x12}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000a6141bb622f58900000000000b0000000091a583ef28ae8b84"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48804) [ 238.598483] do_vfs_ioctl+0x75a/0xfe0 [ 238.602391] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 238.608031] ? ioctl_preallocate+0x1a0/0x1a0 [ 238.612495] ? security_file_ioctl+0x76/0xb0 [ 238.616911] ? security_file_ioctl+0x83/0xb0 [ 238.621329] SyS_ioctl+0x7f/0xb0 [ 238.624704] ? do_vfs_ioctl+0xfe0/0xfe0 [ 238.628686] do_syscall_64+0x1d5/0x640 [ 238.632581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 238.632831] audit: type=1400 audit(1591543902.032:53): avc: denied { read accept } for pid=11627 comm="syz-executor.5" path="socket:[39653]" dev="sockfs" ino=39653 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 238.637764] RIP: 0033:0x45ca69 [ 238.637769] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.637779] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 238.637784] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 238.637789] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:31:42 executing program 4 (fault-call:5 fault-nth:17): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x70, 0x1, 0xc6, 0x0, 0x1, 0x0, 0x7, 0x1a220, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0xa0, 0x2, 0x80000000, 0x1, 0xffffffffffff0000, 0x40, 0xff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140)={0x7, 0x81}, 0x2) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x40008, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xbea996c9824cf5e1}, 0x20000000) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 238.637794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 238.637800] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4a4081, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) mlock2(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000240)={0xb, {0x40, 0x8, 0x9, 0x6}}) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r6 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000080)=0xd3a, 0x2) bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @any, 0x5}, 0xa) 15:31:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000100)) [ 238.771540] FAULT_INJECTION: forcing a failure. [ 238.771540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.839259] CPU: 0 PID: 11658 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 238.847187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.856549] Call Trace: [ 238.859151] dump_stack+0x1b2/0x283 [ 238.862794] should_fail.cold+0x10a/0x154 [ 238.866963] __alloc_pages_nodemask+0x22b/0x2730 [ 238.871733] ? perf_event_update_userpage+0x52f/0x760 [ 238.876950] ? __lock_acquire+0x655/0x42a0 [ 238.881211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 238.886069] ? __lock_acquire+0x655/0x42a0 [ 238.890345] ? __lock_acquire+0x655/0x42a0 [ 238.894595] ? mark_held_locks+0xa6/0xf0 [ 238.898666] alloc_pages_vma+0xc1/0x4b0 [ 238.902649] shmem_alloc_page+0xe1/0x180 [ 238.902661] ? shmem_swapin+0x180/0x180 [ 238.902670] ? retint_kernel+0x2d/0x2d [ 238.902683] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 238.902694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 238.924515] ? check_preemption_disabled+0x35/0x240 [ 238.929550] ? retint_kernel+0x2d/0x2d [ 238.933461] shmem_mfill_atomic_pte+0x984/0x1780 [ 238.938245] ? shmem_file_llseek+0x220/0x220 [ 238.942670] ? check_preemption_disabled+0x35/0x240 [ 238.947698] ? retint_kernel+0x2d/0x2d [ 238.951617] shmem_mfill_zeropage_pte+0x81/0xa0 [ 238.956303] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 238.960985] ? mfill_zeropage+0x2ff/0xce0 [ 238.965178] mfill_zeropage+0x7fe/0xce0 [ 238.969178] userfaultfd_ioctl+0x1542/0x2f70 [ 238.973601] ? get_pid_task+0x91/0x130 [ 238.977518] ? userfaultfd_read+0x1270/0x1270 [ 238.982026] ? mark_held_locks+0xa6/0xf0 [ 238.986109] ? retint_kernel+0x2d/0x2d 15:31:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r5 = accept(r4, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_aout(r8, &(0x7f0000000bc0)={{0xcc, 0x5, 0x6, 0x1ac, 0x329, 0x2, 0x1a9}, "f80c9ad07d58b920d3cac8fa2ad78099093d83f6c1e1963cdf92d1789cde6ea24b586a57e44b5e757abc19782759c6b89c9a81f23dc0c473f9402031ac589b2b", [[], []]}, 0x260) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r10 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r10, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r5, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r11, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r9], 0x7, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd8, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc3, 0xbe, "dede2552776c5d78c087c7882621e13019df045102d0502fe722cb363e777a1ab64ec9c8c99599bbd2627c994b56a7414dc2aea940dcbe2b8e4fba07787ec1367a45db717eedc584c66f3b62b723307aae38ef7758c1d7da7cb362c0c8c908ac0352a6a1012bd96f102306b02809acca1d064669dedc62971a3779ef5309fb72bce6ea1f8afee3c11f653ff6834d796914d710fcd596bdf906ee9fc52cad40189f1f6f74db3b2127ef4612bbb0e3152eb391021ef6318c7bf31f89684c8406"}]}, 0xd8}}, 0x8000004) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000140)={0x9, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, 0x8, 0x1, 0x401, 0x70bd2c, 0x25dfdbff, {0x3, 0x0, 0x3}, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x5) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) [ 238.990013] ? trace_hardirqs_on+0x10/0x10 [ 238.994269] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 238.999038] ? check_preemption_disabled+0x35/0x240 [ 239.004075] ? retint_kernel+0x2d/0x2d [ 239.007975] ? userfaultfd_read+0x1270/0x1270 [ 239.012500] ? do_vfs_ioctl+0x75a/0xfe0 [ 239.016489] do_vfs_ioctl+0x75a/0xfe0 [ 239.020296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 239.025055] ? ioctl_preallocate+0x1a0/0x1a0 [ 239.029469] ? check_preemption_disabled+0x35/0x240 [ 239.035395] ? retint_kernel+0x2d/0x2d [ 239.039313] SyS_ioctl+0x7f/0xb0 [ 239.043130] ? do_vfs_ioctl+0xfe0/0xfe0 [ 239.047123] do_syscall_64+0x1d5/0x640 [ 239.051057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 239.056253] RIP: 0033:0x45ca69 [ 239.059450] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.067173] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 239.074625] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 239.081904] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:31:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffff0001, 0x4000) 15:31:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x4, 0x10000) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 15:31:42 executing program 4 (fault-call:5 fault-nth:18): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 239.089189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 239.096469] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:42 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x4, 0x30, r0, 0x80953000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r5 = accept(r4, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r7 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r8 = geteuid() fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad00007ffdaa82f6aa3c0c43543bd24c8d243006262f6c177cdfb3df47e6af2ba399f7da9386b8cbb15169209e5e96df364f3a626a7c99e140d29ca2eb5e05fdef832c80b1bd85", @ANYRES32=r5, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r8, @ANYBLOB="a45cddb69ce73002f9439329c3bb92960ac3cdc687bdbaee1434d5828b7d0eb1bc40704145d352365744e385e54d992f72bbddd49fb3cbb833786fb5443ca098f13673b206ef25311d7c512fe52d9cb8569867b9f9a0492f9bb9920dec2c40f304b797cce0a17db6ab8989ef2bdc7607de18fe9c96e5a59c06000000000000007544435397fc5c312daafc6269e4cc5184b5d0a3ce6f4fd3bca24c07630f28331768317dffbffc7f8c86cbfedbb32b303c10a7bcf337fe5c73a7ecaf451b66cbf3899fa53fa59a9bd515e67866a7124fcac2c880be4e8d776b65b595eef53a005d4efd3686883ab50deeea652d66afc15d500c8698d48b1d53c8137b348e229ded6afa85da8f7d5cd537486bc2c356c0dbcb6611628aa2251463bb09fcba0fa3a75da1d37b9a94749e26545aae7b7fe6023517e9c23ff80c64aa350220b177911be2302e7afacc6e55bec3d96ae84d4de579967984bd33700aa8b2389862845705ca0de82b420a8e0ea0588907273dce76541926043134ee9715b19c3ea3cde5784fc10a26bb47519bf03933a09276601fc0550911d603e530945deddeca00"/436, @ANYRES64, @ANYRESDEC=r6], 0x7, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x1}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="62cef4577542"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x0) [ 239.218116] FAULT_INJECTION: forcing a failure. [ 239.218116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.255229] CPU: 0 PID: 11697 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 239.263167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.272544] Call Trace: [ 239.275149] dump_stack+0x1b2/0x283 [ 239.278794] should_fail.cold+0x10a/0x154 [ 239.282956] __alloc_pages_nodemask+0x22b/0x2730 [ 239.287719] ? trace_hardirqs_on+0x10/0x10 [ 239.291966] ? lock_downgrade+0x6e0/0x6e0 [ 239.296125] ? check_preemption_disabled+0x35/0x240 [ 239.301158] ? check_preemption_disabled+0x35/0x240 [ 239.306555] ? finish_task_switch+0x178/0x610 [ 239.311062] ? gfp_pfmemalloc_allowed+0x150/0x150 15:31:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0xa9df, 0x1e, [{0xd, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0xb}, {0x8, 0x1}, {0xa}, {0x6}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0xd, 0x1}, {0xd}, {0x7}, {0x8, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {0x4}, {0xf}, {0x4, 0x1}, {0x8}, {0x9}, {0xf}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}]}) [ 239.315925] ? __lock_acquire+0x655/0x42a0 [ 239.320173] ? __lock_acquire+0x655/0x42a0 [ 239.324423] ? _raw_spin_unlock_irq+0x5a/0x90 [ 239.329022] alloc_pages_vma+0xc1/0x4b0 [ 239.333011] shmem_alloc_page+0xe1/0x180 [ 239.337080] ? shmem_swapin+0x180/0x180 [ 239.341064] ? retint_kernel+0x2d/0x2d [ 239.344964] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 239.349994] ? lock_downgrade+0x6e0/0x6e0 [ 239.354183] ? do_raw_spin_unlock+0x164/0x250 [ 239.358692] shmem_mfill_atomic_pte+0x984/0x1780 [ 239.363719] ? shmem_file_llseek+0x220/0x220 [ 239.368135] ? retint_kernel+0x2d/0x2d [ 239.372038] shmem_mfill_zeropage_pte+0x81/0xa0 [ 239.376722] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 239.381406] mfill_zeropage+0x7fe/0xce0 [ 239.385584] userfaultfd_ioctl+0x1542/0x2f70 [ 239.390009] ? check_preemption_disabled+0x35/0x240 [ 239.395410] ? retint_kernel+0x2d/0x2d [ 239.399396] ? get_pid_task+0x91/0x130 [ 239.403298] ? userfaultfd_read+0x1270/0x1270 [ 239.407976] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 239.413094] ? trace_hardirqs_on_thunk+0x1a/0x1c 15:31:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x8000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0, 0x4000}], 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:43 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x70, 0x1, 0xc6, 0x0, 0x1, 0x0, 0x7, 0x1a220, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0xa0, 0x2, 0x80000000, 0x1, 0xffffffffffff0000, 0x40, 0xff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140)={0x7, 0x81}, 0x2) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 239.417953] ? trace_hardirqs_on+0x10/0x10 [ 239.422210] ? retint_kernel+0x2d/0x2d [ 239.426113] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 239.431174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 239.435950] ? userfaultfd_read+0x1270/0x1270 [ 239.440456] ? do_vfs_ioctl+0x75a/0xfe0 [ 239.445064] do_vfs_ioctl+0x75a/0xfe0 [ 239.448883] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 239.455044] ? ioctl_preallocate+0x1a0/0x1a0 [ 239.459469] ? security_file_ioctl+0x76/0xb0 [ 239.463897] ? security_file_ioctl+0x83/0xb0 [ 239.468314] SyS_ioctl+0x7f/0xb0 [ 239.471689] ? do_vfs_ioctl+0xfe0/0xfe0 [ 239.475675] do_syscall_64+0x1d5/0x640 [ 239.479579] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 239.484870] RIP: 0033:0x45ca69 [ 239.488235] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.495955] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 239.503232] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 239.510510] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:31:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x458000, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x7fffffff) [ 239.517798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 239.525075] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffff0001, 0x4000) 15:31:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 15:31:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x100, 0x0) 15:31:43 executing program 4 (fault-call:5 fault-nth:19): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffff0001, 0x4000) 15:31:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x4000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 239.830013] FAULT_INJECTION: forcing a failure. [ 239.830013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1410c3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(r4, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) ustat(0x0, &(0x7f00000001c0)) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x44681, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000180), 0x4) write$cgroup_int(r5, &(0x7f0000000200), 0xfffffffffffffce7) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x9d0000, 0x1, 0x0, r6, 0x0, &(0x7f0000000240)={0x9e0001, 0x0, [], @value64=0x1543}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f00000002c0)) 15:31:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x81, 0x8, 0x1b, 0x3}) r5 = userfaultfd(0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000a6141bb622f58900000000000b0000000091a583ef28ae8b84"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) [ 239.904903] CPU: 0 PID: 11743 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 239.912829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.922193] Call Trace: [ 239.924799] dump_stack+0x1b2/0x283 [ 239.929069] should_fail.cold+0x10a/0x154 [ 239.933763] __alloc_pages_nodemask+0x22b/0x2730 [ 239.938557] ? __lock_acquire+0x655/0x42a0 [ 239.942853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 239.947720] ? __lock_acquire+0x655/0x42a0 [ 239.951978] ? __lock_acquire+0x655/0x42a0 [ 239.956236] ? trace_hardirqs_on+0x10/0x10 [ 239.960492] alloc_pages_vma+0xc1/0x4b0 [ 239.964495] shmem_alloc_page+0xe1/0x180 [ 239.968578] ? shmem_swapin+0x180/0x180 [ 239.972571] ? mark_held_locks+0xa6/0xf0 [ 239.976904] ? lock_acquire+0x170/0x3f0 [ 239.980895] ? mem_cgroup_id_get_many+0x60/0x60 [ 239.985574] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 239.990696] ? lock_downgrade+0x6e0/0x6e0 [ 239.998514] shmem_mfill_atomic_pte+0x984/0x1780 15:31:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x382}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x38}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008001}, 0xc0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000000)={0x5, 0x8, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 240.003309] ? shmem_file_llseek+0x220/0x220 [ 240.007825] ? check_preemption_disabled+0x35/0x240 [ 240.012854] ? retint_kernel+0x2d/0x2d [ 240.016935] shmem_mfill_zeropage_pte+0x81/0xa0 [ 240.021622] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 240.026305] ? mfill_zeropage+0x325/0xce0 [ 240.030571] mfill_zeropage+0x7fe/0xce0 [ 240.034575] userfaultfd_ioctl+0x1542/0x2f70 [ 240.038992] ? __might_fault+0x177/0x1b0 [ 240.043593] ? _copy_from_user+0x94/0x100 [ 240.047943] ? get_pid_task+0x91/0x130 [ 240.051852] ? userfaultfd_read+0x1270/0x1270 [ 240.056358] ? retint_kernel+0x2d/0x2d [ 240.060264] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 240.065327] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 240.070177] ? check_preemption_disabled+0x35/0x240 [ 240.075300] ? retint_kernel+0x2d/0x2d [ 240.079207] ? selinux_file_ioctl+0x83/0x560 [ 240.083630] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 240.088400] ? userfaultfd_read+0x1270/0x1270 [ 240.093607] ? do_vfs_ioctl+0x75a/0xfe0 [ 240.097590] do_vfs_ioctl+0x75a/0xfe0 15:31:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/234, 0xea}], 0x4, 0x1000007) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5, 0x40) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0x12) [ 240.101402] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 240.107039] ? ioctl_preallocate+0x1a0/0x1a0 [ 240.111473] ? security_file_ioctl+0x76/0xb0 [ 240.115883] ? security_file_ioctl+0x83/0xb0 [ 240.120383] SyS_ioctl+0x7f/0xb0 [ 240.124618] ? do_vfs_ioctl+0xfe0/0xfe0 [ 240.128600] do_syscall_64+0x1d5/0x640 [ 240.132503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 240.137835] RIP: 0033:0x45ca69 [ 240.141109] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 15:31:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) setregid(0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x69, 0x0, 0x0, 0x7}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) sendmsg$netlink(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="607c9a833ecf9f2a0000003c5d3483ed7589b407140948caa7b65006130fc99e8d313de85ca1e7cec5b28514fcb07bb7542131012ca432bc39d8c2ddd80495a4fc941d13212b07a381c5c88ed2bc0000"], 0x60}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00070000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000070f200000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES16=r6, @ANYBLOB="00000000180000000000000001000000010000008f10a22b1149c5c7c7466439f20dded686be00211f6d116dff7f6f8d47b98d0d37d29fd39f5896008c4818b7b0a593122e366ace8a281ded5bb1a8bc1d812cf40f276f3fb86d06ba7442c9e4d1fe6dad22e2c4a592524b8dc84f78da21aedb62d5240d7e49f5980d37fe55f768593e0b3f412eb657a2f4b5fd2264230609503b424725b123b0bc5dccc6e9fcf5dc65862aba8c825c6d9e5f8edb4fe0faf53965b2af15c79dcc2b497454ea70ad846fd53ce729f5ac581d9bba548c9295f9d691daf3633d32746bde640d947898f90748d60f7ad38d96c1867bca1d1812d0bac8e871b68b643d29d7172f3a39f4d95952dfa15af10977eb", @ANYRES32=r0, @ANYRES32=r4], 0x58, 0x4008100}, 0xc1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000840)={0xd, "4df67db3dd345fa6d44afdd35e20b4229687b444b9350c9711aa33aaf43247fe21163b1fce0bc2472ef6978ae0f4385a17a7a8c8411ebfbd103e70294e1d2252305c77dd7a6afc1d51a7a9ac89d1814d55e71e5fbf669ddf4929cef40a69de311d99b1b3c7ccbbc210a278a7cbc21f30f7cc1fa6ff09e65c9232e16d249ab2f1d6cce535039e33327d99ced3c9aebe0156e1584af988aad19849f0b4e1598bd60c625258f512742b3ceadc2d8eaf0bae8985d3bcad6c94f01016f08e4bcf653991ed1882c94c0c9bdba7f070163b2194a32f01911df8e1fc8bc62afdfa093e9e00e05b4b57c4ce567a1fb1c1d35a0abd3a1775b3daed656437f8f10c635aaf27e06451eb2cf6ed11b6edfb692c28b8e6f91e0ba4e35546e5ca170aaa300aad2c4bab9d92bf7f1ffa25554ced499cc0b705c5435d4238bcbc2b101be8cb4f94593f3703fc89c2e022d426bb228c6eba1e8b95ed725723c943346a893cecc4383efe405bc7a4e3a56eee870df95d339a239da30ecd424e7505fd93332df3ad8cda1d014db3fc9ec217c9b6716c008f7b52439d97739278094302a57b7d3ec7fa295c421fee611dc04b1307ff950c0197724181767c4b9ca77632ada5c431eda1270e0bfb894fce26fe2a8e14cbb4b7133ba4628e566db5694de0f0720fbeac9048fbd2ccc05951f7fba45b2b3bfb7c1c0dc2b655587fcbbb64af8fd5cc8409ae07"}) 15:31:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x100, 0x4, 0x7f, 0x6}, {0x8001, 0x2, 0xf0, 0x145}, {0x8, 0x74, 0x2, 0x10000}, {0x1, 0x1f, 0x6, 0x423}, {0x7ff, 0xc, 0x2, 0x1}, {0x533, 0xf9, 0x8, 0x101}, {0x81, 0xef, 0x1f, 0x1}, {0x9, 0x6, 0xfe, 0x1}]}, 0x10) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000, 0x400001, 0x0, 0x0, 0x0, 0xfffffffc}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0x1409, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4885}, 0x40052) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 240.148820] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 240.156298] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 240.163566] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.170944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 240.178216] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000280)=""/167, 0xd0}, {&(0x7f0000000600)=""/189, 0xbd}], 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000440)="600084e002000a0000000001000000c98f13", 0x12, 0xbb009bc}, {&(0x7f0000000880)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x261202, 0x0) openat$cgroup_ro(r6, &(0x7f0000000380)='cgroup.events\x00', 0x26e1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='statm\x00') ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f00000003c0)=0x32) readlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)=""/238, 0xee) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000400)) 15:31:44 executing program 4 (fault-call:5 fault-nth:20): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) creat(&(0x7f0000000240)='./file0\x00', 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r1, 0x0, r4}, 0x10) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) 15:31:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 15:31:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 240.306806] audit: type=1800 audit(1591543904.042:54): pid=11775 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16195 res=0 [ 240.336987] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 15:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000200)="1fca4c732476b9e15f144d99250f23451bf20a1d500b419a8655a02693cd1ca0dd7636f62ec33b358503ad1d317abf54bb08154a70cb1d9b6db82ea535fee5dd425e146170343333f54fc1e9e4f7ce5f2290598386bd8522d0166e3b043f3134dc01d14a4afa6674194f7afa7d14f3db488a1ddf45ff9bdd77e872b607d688dde642973c856eacab71b92f1462aa1690cb01a73ada223fcdef8698aa3b81d797903269fef7509babc03f0ec70e5e660b08e1c5ba6599c65df345ea2010d13d7194d4a69bd4db8214e134dd43207757d5b2dd367a4b6eeaf7609ea83698e2ee34a3f0", 0xe2}], 0x2, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 240.415555] Process accounting resumed 15:31:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) setregid(0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x69, 0x0, 0x0, 0x7}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) sendmsg$netlink(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="607c9a833ecf9f2a0000003c5d3483ed7589b407140948caa7b65006130fc99e8d313de85ca1e7cec5b28514fcb07bb7542131012ca432bc39d8c2ddd80495a4fc941d13212b07a381c5c88ed2bc0000"], 0x60}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00070000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000070f200000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r4], 0x58, 0x4008100}, 0xc1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000840)={0xd, "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"}) 15:31:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1ff, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x3, 0x0, 0x3f, 0x3, 'syz1\x00', 0x3}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOBLANK(r4, 0x4611, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 240.437078] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 240.457802] FAULT_INJECTION: forcing a failure. [ 240.457802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.499214] Process accounting resumed [ 240.506252] CPU: 0 PID: 11797 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 240.514155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.524203] Call Trace: [ 240.526802] dump_stack+0x1b2/0x283 [ 240.530440] should_fail.cold+0x10a/0x154 [ 240.534599] __alloc_pages_nodemask+0x22b/0x2730 [ 240.539656] ? event_sched_in.isra.0+0x632/0xb90 [ 240.544429] ? trace_hardirqs_on+0x10/0x10 [ 240.548698] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 240.554070] ? __lock_acquire+0x655/0x42a0 [ 240.558313] ? __lock_acquire+0x655/0x42a0 [ 240.562556] ? trace_hardirqs_on+0x10/0x10 [ 240.566796] alloc_pages_vma+0xc1/0x4b0 [ 240.570780] shmem_alloc_page+0xe1/0x180 [ 240.574845] ? shmem_swapin+0x180/0x180 [ 240.578825] ? __schedule+0x8ae/0x1d70 [ 240.582716] ? lock_acquire+0x170/0x3f0 [ 240.586699] ? mem_cgroup_id_get_many+0x60/0x60 [ 240.591375] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 240.596442] ? mark_held_locks+0xa6/0xf0 [ 240.600514] ? retint_kernel+0x2d/0x2d [ 240.604412] shmem_mfill_atomic_pte+0x984/0x1780 [ 240.609185] ? retint_kernel+0x2d/0x2d [ 240.613079] ? shmem_file_llseek+0x220/0x220 [ 240.617500] shmem_mfill_zeropage_pte+0x81/0xa0 [ 240.622211] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 240.626894] mfill_zeropage+0x7fe/0xce0 [ 240.630886] userfaultfd_ioctl+0x1542/0x2f70 [ 240.635307] ? lock_downgrade+0x6e0/0x6e0 [ 240.639463] ? userfaultfd_read+0x1270/0x1270 [ 240.643969] ? retint_kernel+0x2d/0x2d 15:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x60, 0xc40, 0x1, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 240.647865] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 240.652886] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 240.657654] ? check_preemption_disabled+0x35/0x240 [ 240.662683] ? selinux_file_ioctl+0x19a/0x560 [ 240.667176] ? selinux_file_ioctl+0x22c/0x560 [ 240.671674] ? userfaultfd_read+0x1270/0x1270 [ 240.676173] ? do_vfs_ioctl+0x75a/0xfe0 [ 240.680149] do_vfs_ioctl+0x75a/0xfe0 [ 240.683960] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 240.689593] ? ioctl_preallocate+0x1a0/0x1a0 [ 240.694017] ? security_file_ioctl+0x76/0xb0 [ 240.698432] ? security_file_ioctl+0x83/0xb0 [ 240.702842] SyS_ioctl+0x7f/0xb0 [ 240.706204] ? do_vfs_ioctl+0xfe0/0xfe0 [ 240.710176] do_syscall_64+0x1d5/0x640 [ 240.714074] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 240.719259] RIP: 0033:0x45ca69 [ 240.722447] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.730159] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 240.737432] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 15:31:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x9, 0xfffffffffffffd81) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000240)="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", 0x1000, 0x3}, {&(0x7f0000000140)="3e509b7df1a65a249406a5dbf60cf2", 0xf, 0x5}, {&(0x7f0000000180)="2ce4fef3409d84017b901a94defecedf52cc74168f2bc7023490f14e7a74fae77d25bef8049d5f53e1ab29b71990b5708bcd394fc2094a9909e44414e5", 0x3d}, {&(0x7f0000001240)="86a7d1f8194e4e51498934413fa188ffab7829e8b99d721ffa97ee6b317e18a59396bce96a7bdc00065deda001e2da5a73677bb5af13c9f8e233b2b5891e46625774f12071f9c9feba84a142a60a426f61d6bd155da7ed14ab3260621c0ef72a0d14d5afe98ba536bb4ba019c9f96bb266fda7700f939e9c21532543505535d0f959fe14354c3491dd0dc08205ade8db51f4e840673a42c7f196d164dd5e0d1743406a211b0f847c8263cd47089155525a88f35b", 0xb4, 0x400}, {&(0x7f0000001300)="949ccb6cce4bcd4b164a84350a145d0b9c68fa3b8641ed132ce8989eaa5d3c2132b63f6c2f9d3f5ab5a2edddc3c1b82b4a12b28a6fc7975ba2f9e7815fedc3df2bc4802cc7d6522d207492516e3304c0b67c7d15500b28f47a1932e441daa54aa2f39a29e868d51689a76bad9b1d14b9f06066e12df9b83663c5b3fdee12f41153", 0x81, 0x100000001}], 0x10, &(0x7f0000001440)={[{@part={'part', 0x3d, 0x782}}, {@creator={'creator', 0x3d, "12a5b85e"}}], [{@fowner_lt={'fowner<', r2}}, {@seclabel='seclabel'}]}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0xf600, 0x3f, 0x5}) 15:31:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) setregid(0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x69, 0x0, 0x0, 0x7}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r6) fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) sendmsg$netlink(r4, &(0x7f00000005c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="607c9a833ecf9f2a0000003c5d3483ed7589b407140948caa7b65006130fc99e8d313de85ca1e7cec5b28514fcb07bb7542131012ca432bc39d8c2ddd80495a4fc941d13212b07a381c5c88ed2bc0000"], 0x60}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00070000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000070f200000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r4], 0x58, 0x4008100}, 0xc1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000840)={0xd, "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"}) 15:31:44 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x410182) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='\x00\x00') syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x3, 0x60002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x200000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffe}, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0xf, 0x7fffffff, 0x10800}, &(0x7f0000000600)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x1c7061e8}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r3, r4, 0x0, 0x2, &(0x7f0000000240)='%\x00', r5}, 0x30) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast1, 0x1}}, {{0xa, 0x2, 0xffff64b6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6b}}}, 0x108) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000340)) [ 240.744717] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.751993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 240.759266] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0x200, 0x0, 0x4, 0x10000, 0xe835, {}, {0x4, 0xc, 0x1, 0x8, 0x40, 0x7, "66de9ab2"}, 0x3, 0x3, @userptr=0x400, 0x81, 0x0, r3}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYBLOB="6ffe00000000000000000300000020000000000000000064703a73797a31000000000c000280080002008d000000"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xb4, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffe, @private2={0xfc, 0x2, [], 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @local, 0x10e}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xcde, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44880}, 0xad90da928f6851f8) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 240.897915] hfsplus: unable to parse mount options 15:31:44 executing program 4 (fault-call:5 fault-nth:21): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000340)={0x2, 0xfffffff7, 0x0, 'queue1\x00', 0x3000000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(r2, &(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0x6, 0x0, 0x4, 0x20000, 0x1, {0x0, 0xea60}, {0x4, 0x8, 0x42, 0x7f, 0x81, 0x0, "5b558973"}, 0x4, 0x1, @offset=0x5, 0x9, 0x0, r0}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000419000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) dup2(r1, r0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00004fc000/0x12000)=nil, 0x12000}, 0x1}) 15:31:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @loopback}}}, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) dup(r4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x7fff, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6ca4}, 0x0, 0x0, 0xffffffffffffffff, 0x1a) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0x2, 0x5, &(0x7f0000000180)=[0x9, 0x23, 0x6, 0x1000, 0xc3e6], &(0x7f0000000040)=[0x0, 0x2, 0x4a, 0x6, 0xdf, 0xffff, 0x4, 0xbc], &(0x7f0000000100)=[0x6, 0xfff, 0x4f99, 0x401, 0x6, 0x7f]}) 15:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x880, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 241.055777] FAULT_INJECTION: forcing a failure. [ 241.055777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:44 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 15:31:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fstatfs(r0, &(0x7f0000000040)=""/48) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe2(&(0x7f0000000000), 0x4000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 241.156808] CPU: 0 PID: 11848 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 241.164720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.174081] Call Trace: [ 241.176680] dump_stack+0x1b2/0x283 [ 241.180326] should_fail.cold+0x10a/0x154 [ 241.184486] __alloc_pages_nodemask+0x22b/0x2730 [ 241.189262] ? trace_hardirqs_on+0x10/0x10 [ 241.193507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 241.198355] ? check_preemption_disabled+0x35/0x240 15:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 241.203378] ? check_preemption_disabled+0x35/0x240 [ 241.208409] ? mark_held_locks+0xa6/0xf0 [ 241.212475] ? _raw_spin_unlock_irq+0x24/0x90 [ 241.216985] alloc_pages_vma+0xc1/0x4b0 [ 241.220970] shmem_alloc_page+0xe1/0x180 [ 241.225042] ? shmem_swapin+0x180/0x180 [ 241.229034] ? firmware_map_remove+0x18f/0x18f [ 241.233630] ? ___preempt_schedule+0x16/0x18 [ 241.238046] ? preempt_schedule_common+0x4a/0xc0 [ 241.242813] ? ___preempt_schedule+0x16/0x18 [ 241.247234] shmem_mfill_atomic_pte+0x984/0x1780 [ 241.252016] ? shmem_file_llseek+0x220/0x220 15:31:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000100)=""/238, &(0x7f0000000000)=0xee) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) [ 241.256449] shmem_mfill_zeropage_pte+0x81/0xa0 [ 241.261142] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 241.265827] mfill_zeropage+0x7fe/0xce0 [ 241.269824] userfaultfd_ioctl+0x1542/0x2f70 [ 241.274244] ? get_pid_task+0x91/0x130 [ 241.278144] ? userfaultfd_read+0x1270/0x1270 [ 241.282658] ? retint_kernel+0x2d/0x2d [ 241.286562] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 241.291592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 241.296364] ? retint_kernel+0x2d/0x2d [ 241.300276] ? userfaultfd_read+0x1270/0x1270 [ 241.306816] ? do_vfs_ioctl+0x75a/0xfe0 [ 241.310802] do_vfs_ioctl+0x75a/0xfe0 [ 241.314622] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 241.320258] ? ioctl_preallocate+0x1a0/0x1a0 [ 241.324693] ? security_file_ioctl+0x76/0xb0 [ 241.329115] ? security_file_ioctl+0x83/0xb0 [ 241.333641] SyS_ioctl+0x7f/0xb0 [ 241.337025] ? do_vfs_ioctl+0xfe0/0xfe0 [ 241.341010] do_syscall_64+0x1d5/0x640 [ 241.345023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.350220] RIP: 0033:0x45ca69 [ 241.353413] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.361129] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 241.368405] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 241.375681] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 241.382955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 241.390247] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:45 executing program 4 (fault-call:5 fault-nth:22): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:45 executing program 0: r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000100)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xfffdfffffffffffc, 0x4, 0x2}, r0, 0x7, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) fstatfs(r0, &(0x7f0000000040)=""/48) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 15:31:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x700}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42800, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000340)={{0x2, 0x0, 0xfffeffff, 0xffffffff, 'syz0\x00', 0x7}, 0x0, 0x402, 0x3, r2, 0x4, 0x3f, 'syz0\x00', &(0x7f0000000180)=['\x00', 'net/protocols\x00', 'net/protocols\x00', '+(\x00'], 0x20, [], [0x5, 0x1, 0x1, 0xc70e]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 241.601909] FAULT_INJECTION: forcing a failure. [ 241.601909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) futimesat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x77359400}}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(r3, 0x540b, 0x0) [ 241.649971] CPU: 0 PID: 11895 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 241.657885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.667242] Call Trace: [ 241.669840] dump_stack+0x1b2/0x283 [ 241.673576] should_fail.cold+0x10a/0x154 [ 241.677835] __alloc_pages_nodemask+0x22b/0x2730 [ 241.682606] ? trace_hardirqs_on+0x10/0x10 [ 241.686855] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 241.691705] ? check_preemption_disabled+0x35/0x240 15:31:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x1000, 0x200}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x0, 0x204, 0x8, 0x9, 0x5, 0x80000000, 0x37bf, r6}, 0x20) [ 241.696739] ? check_preemption_disabled+0x35/0x240 [ 241.701772] ? mark_held_locks+0xa6/0xf0 [ 241.705839] ? _raw_spin_unlock_irq+0x24/0x90 [ 241.711352] alloc_pages_vma+0xc1/0x4b0 [ 241.715350] shmem_alloc_page+0xe1/0x180 [ 241.719420] ? shmem_swapin+0x180/0x180 [ 241.723399] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 241.728427] ? firmware_map_remove+0x18f/0x18f [ 241.733039] ? ___preempt_schedule+0x16/0x18 [ 241.737460] ? preempt_schedule_common+0x4a/0xc0 [ 241.742227] ? ___preempt_schedule+0x16/0x18 15:31:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000000)={0x1, 0x4, 0x0, "36f77cd421311c7fb603109018d3569dc885d24b00961d461d1d932f78f11af5fa973680385176dadb3feaa5a3702b766a70f43c1ab7db22af8c2f65", 0x2d, "55be68fd7457ab47437e1f49a49c00d7acd2edd382d59aa4ed788af00dc68f0dae6cfe07feaa4c1282116286976a87186d553b6ed06bebb96f66c75d"}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040815}, 0x4004840) [ 241.746650] shmem_mfill_atomic_pte+0x984/0x1780 [ 241.751422] ? shmem_file_llseek+0x220/0x220 [ 241.755840] ? retint_kernel+0x2d/0x2d [ 241.759827] shmem_mfill_zeropage_pte+0x81/0xa0 [ 241.764516] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 241.769205] mfill_zeropage+0x7fe/0xce0 [ 241.773281] userfaultfd_ioctl+0x1542/0x2f70 [ 241.777745] ? get_pid_task+0x91/0x130 [ 241.781644] ? userfaultfd_read+0x1270/0x1270 [ 241.786142] ? lock_downgrade+0x6e0/0x6e0 [ 241.790299] ? get_pid_task+0x96/0x130 [ 241.794208] ? trace_hardirqs_on+0x10/0x10 [ 241.798459] ? retint_kernel+0x2d/0x2d [ 241.802353] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 241.807374] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 241.812229] ? userfaultfd_read+0x1270/0x1270 [ 241.816739] ? do_vfs_ioctl+0x75a/0xfe0 [ 241.820717] do_vfs_ioctl+0x75a/0xfe0 [ 241.824527] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 241.830165] ? ioctl_preallocate+0x1a0/0x1a0 [ 241.834595] ? security_file_ioctl+0x76/0xb0 [ 241.839011] ? security_file_ioctl+0x83/0xb0 [ 241.843425] SyS_ioctl+0x7f/0xb0 [ 241.846797] ? do_vfs_ioctl+0xfe0/0xfe0 [ 241.850775] do_syscall_64+0x1d5/0x640 [ 241.854668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.859856] RIP: 0033:0x45ca69 [ 241.863041] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.870748] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 241.878024] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 241.885813] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 241.893174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 15:31:45 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', r5}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa4, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 241.900453] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 15:31:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r5, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r7, 0x74, "d6070495cad195c8666f56e35c8b0f412a31968d58bba5d72047a5b9c2fc467d4388abbce53df19fc47a4757c98fd1811df2bc43a30b79c02c4e371b191f211295310bf80dd2e1fad2dab0706829b3f38e2255381721987c1365662550df5da953a2f4903ed1cd64757fa3a7ad9fc387b4d3804c"}, &(0x7f0000000080)=0x7c) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') 15:31:45 executing program 4 (fault-call:5 fault-nth:23): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 15:31:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="30788cf1373ec2e27654c7e10ba1633d29b529cde304fafeb44ede69911ff095fd2c348be63a979f5a582f483be975c3453be1596bbfd9eced3d5aeab69e0b3bebb71055edbc037f7b552c292a651ba22bedc209270b0fbd8822395387884eed22c2d871054eafa176c82a2b8a0a97720b2bf7abc73dc197f0e23dccb9b31bf8c10580b342088b3687250a1197dc02a4", 0x90, 0x0, &(0x7f0000618000)={0x2, 0x46a0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0xd35, 0xe91, 0x0, 0x7, 0x1ff}, 0x14) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)) 15:31:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 242.055919] FAULT_INJECTION: forcing a failure. [ 242.055919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 15:31:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/189, 0xbd}], 0x3, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ffffffffffffffc) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='%\x00') [ 242.100647] CPU: 0 PID: 11944 Comm: syz-executor.4 Not tainted 4.14.183-syzkaller #0 [ 242.108743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.118102] Call Trace: [ 242.120715] dump_stack+0x1b2/0x283 [ 242.124363] should_fail.cold+0x10a/0x154 [ 242.128526] __alloc_pages_nodemask+0x22b/0x2730 [ 242.133290] ? event_sched_in.isra.0+0x632/0xb90 [ 242.138072] ? __lock_acquire+0x655/0x42a0 [ 242.142316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 242.147175] ? __lock_acquire+0x655/0x42a0 [ 242.151419] ? __lock_acquire+0x655/0x42a0 [ 242.155662] ? trace_hardirqs_on+0x10/0x10 [ 242.159904] alloc_pages_vma+0xc1/0x4b0 [ 242.163884] shmem_alloc_page+0xe1/0x180 [ 242.167950] ? shmem_swapin+0x180/0x180 [ 242.171931] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 242.176953] ? lock_acquire+0x170/0x3f0 [ 242.180933] ? mem_cgroup_id_get_many+0x60/0x60 [ 242.185612] ? shmem_mfill_atomic_pte+0x10fc/0x1780 [ 242.190644] ? lock_downgrade+0x6e0/0x6e0 [ 242.194804] ? do_raw_spin_unlock+0x164/0x250 [ 242.199306] shmem_mfill_atomic_pte+0x984/0x1780 [ 242.204081] ? shmem_file_llseek+0x220/0x220 [ 242.208502] shmem_mfill_zeropage_pte+0x81/0xa0 [ 242.213186] ? shmem_mcopy_atomic_pte+0x50/0x50 [ 242.217866] mfill_zeropage+0x7fe/0xce0 [ 242.221860] userfaultfd_ioctl+0x1542/0x2f70 [ 242.226274] ? mark_held_locks+0xa6/0xf0 [ 242.230346] ? retint_kernel+0x2d/0x2d [ 242.230922] memory commitment underflow [ 242.234245] ? userfaultfd_read+0x1270/0x1270 [ 242.234258] ? retint_kernel+0x2d/0x2d [ 242.234270] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 242.234281] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 242.234292] ? check_preemption_disabled+0x35/0x240 [ 242.234311] ? selinux_file_ioctl+0x19a/0x560 [ 242.234320] ? selinux_file_ioctl+0x1ca/0x560 [ 242.234329] ? userfaultfd_read+0x1270/0x1270 [ 242.234341] ? do_vfs_ioctl+0x75a/0xfe0 [ 242.234349] do_vfs_ioctl+0x75a/0xfe0 [ 242.234360] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 242.234371] ? ioctl_preallocate+0x1a0/0x1a0 [ 242.234389] ? security_file_ioctl+0x76/0xb0 [ 242.270738] ------------[ cut here ]------------ [ 242.274896] ? security_file_ioctl+0x83/0xb0 [ 242.278860] WARNING: CPU: 1 PID: 11952 at mm/util.c:604 __vm_enough_memory.cold+0x18/0x59 [ 242.282636] SyS_ioctl+0x7f/0xb0 [ 242.288230] Kernel panic - not syncing: panic_on_warn set ... [ 242.288230] [ 242.292621] ? do_vfs_ioctl+0xfe0/0xfe0 [ 242.329587] do_syscall_64+0x1d5/0x640 [ 242.333465] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 242.338635] RIP: 0033:0x45ca69 [ 242.341805] RSP: 002b:00007f32caa07c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.349496] RAX: ffffffffffffffda RBX: 00000000004efe40 RCX: 000000000045ca69 [ 242.356751] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 242.364001] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 242.371251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 242.378501] R13: 00000000000005bf R14: 00000000004c8827 R15: 00007f32caa086d4 [ 242.385767] CPU: 1 PID: 11952 Comm: syz-executor.5 Not tainted 4.14.183-syzkaller #0 [ 242.393649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.403006] Call Trace: [ 242.405601] dump_stack+0x1b2/0x283 [ 242.409246] panic+0x1f9/0x42d [ 242.412452] ? add_taint.cold+0x16/0x16 [ 242.416841] ? __vm_enough_memory.cold+0x18/0x59 [ 242.416853] ? __vm_enough_memory.cold+0x18/0x59 [ 242.416863] __warn.cold+0x2f/0x30 [ 242.416872] ? ist_end_non_atomic+0x10/0x10 [ 242.416879] ? __vm_enough_memory.cold+0x18/0x59 [ 242.416889] report_bug+0x20a/0x248 [ 242.416899] do_error_trap+0x195/0x2d0 [ 242.416907] ? math_error+0x2d0/0x2d0 [ 242.416916] ? ___preempt_schedule+0x16/0x18 [ 242.416928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.416942] invalid_op+0x1b/0x40 [ 242.416950] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 242.469789] RSP: 0018:ffff888051df7c78 EFLAGS: 00010282 [ 242.469799] RAX: 000000000000001b RBX: 0000000000000021 RCX: 0000000000000000 [ 242.469804] RDX: 0000000000000000 RSI: ffffffff868c0980 RDI: ffffed100a3bef85 [ 242.469809] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 242.469813] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888053cc8c80 [ 242.469818] R13: ffffffff87bf9e00 R14: fff80000000541d0 R15: 0000000000000c69 [ 242.469846] ? __vm_enough_memory.cold+0x18/0x59 [ 242.469856] mmap_region+0x583/0x1060 [ 242.469870] do_mmap+0x5b3/0xcb0 [ 242.469883] vm_mmap_pgoff+0x14e/0x1a0 [ 242.469897] ? vma_is_stack_for_current+0xb0/0xb0 [ 242.469906] ? ktime_get+0x1b4/0x2c0 [ 242.469921] SyS_mmap_pgoff+0x3c5/0x510 [ 242.469933] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 242.469941] ? SyS_clock_settime+0x1a0/0x1a0 [ 242.469951] ? do_syscall_64+0x4c/0x640 [ 242.469959] ? align_vdso_addr+0x60/0x60 [ 242.469969] do_syscall_64+0x1d5/0x640 [ 242.469984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 242.469990] RIP: 0033:0x45caba [ 242.469994] RSP: 002b:00007ffd7ad15228 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.470003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045caba [ 242.470007] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 242.470012] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 242.470016] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 242.470020] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000 [ 242.477317] Kernel Offset: disabled [ 242.619190] Rebooting in 86400 seconds..