x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xac, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x3c, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 06:34:30 executing program 5: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, 0x0) 06:34:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x70) r3 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000000)) 06:34:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, 0x0) 06:34:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)=0x8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@cache_none}, {@privport}, {@access_uid={'access', 0x3d, r3}}, {@access_client}, {@cache_none}], [{@subj_user={'subj_user', 0x3d, ':*#'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, ',&-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#(-!'}}]}}) 06:34:30 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0xdf27, @dev={0xfe, 0x80, '\x00', 0x30}, 0x100}}, 0x0, 0x0, 0x1c, 0x0, "134766a8d98d8abea3d6c97063228a1a9d8aca229c6cfbd22e7eb3626dd4efa19890df3e39bd7db3e37618c1cd39834e9d453ff8c3820015bd3ddbabda47b2fb3f940fb138efb093bc7f4b4b5013a6fd"}, 0xd8) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @sack_perm], 0x3) 06:34:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 06:34:30 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$TIOCSCTTY(r1, 0x540e, 0x7) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:30 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x80000, 0x6) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) socketpair(0x22, 0x4, 0xffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 06:34:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, 0x0) 06:34:30 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:30 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) getgroups(0x1, &(0x7f0000000080)=[0xee00]) r3 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r8 = getpgid(r5) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r4, r4, r3, r4], 0x8, {r6}}, 0x58) clone3(&(0x7f0000000280)={0x10106800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x9}, &(0x7f0000000180)=""/125, 0x7d, &(0x7f0000000200)=""/11, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xee00, 0x10, 0x1}, 0x2, 0x19, 0x28956f51, 0x9, r8, r9, 0x81}) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x3, 0x70bd28, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x4008090) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 06:34:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 06:34:30 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:30 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:su_exec_t:s0\x00', 0x1f) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) syz_io_uring_setup(0x2b07, &(0x7f0000000080)={0x0, 0x25cf, 0x0, 0x1, 0x1fe, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) fspick(r2, &(0x7f00000001c0)='./file0\x00', 0x1) 06:34:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x6, 0x5) getsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @private}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @dev}, &(0x7f0000000400)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast1, @loopback}, &(0x7f0000000480)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x438, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x40004}, 0x880) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 06:34:30 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) 06:34:30 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0xa196, @local, 0x5}}, 0x0, 0x0, 0x31, 0x0, "c3dec8da75cef6a95633e43b0292d99f88e9503427c54d07b0dbbdd2a465e30538c050f8a5b9b0f3bd274854760fb50e010a5f8ca0acf60f0dc15e7f0b15106d1bd708fbee3ef9658420e2a8d91f4abb"}, 0xd8) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000380)) r7 = socket(0x8, 0x4, 0x8000006) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="23292fe0c3544604e50bdf816771a03bdaf5dfdb88ce165ae11d4e8a97911de14558c1168d930552f2fa2e33d676a63aceff79f1ed8a4138e5886a8082371e6f96d52216c9e61fe61a", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100000000000c0008000100008000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004810) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x8001, 0x0, &(0x7f0000000040)=[r1, r3]}, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r9, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000140)=':\x00', &(0x7f0000000180)='./file0\x00', r9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r2, 0x1) 06:34:30 executing program 5: r0 = socket(0x18, 0x2, 0x80000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000426bd700017db000000000000434ce0c4afb5ca33f13ed9214dccffaa7c7ed3daed728ecf264ef0e9636376c67d5a088a899da7c03566ce7e78f3cbe60f498f113f171eb513662c0c21d5b25c411f41b6b48cbb765872bffc4e067a43c2b8849a547a1a7c437fd16aff42dec0a92a15aa3b4937d26255ded2fe914f08482b2c0100877874b4b362701b2fa3ff0f15b6d740a47b9e10c0ba86e95b6f2430263342f273850e34b01d7998e2f7226021acb7e59d093361cfa28ea7c201e893022b73ae21769a4a3665088d7b6cbe3a9c0cdf1c523dfa87e1c56d88352072740a012e35c900"/244], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4041) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x401) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f00000001c0)=""/187, &(0x7f0000000280)=0xbb) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x1, 0x7}) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)) [ 872.235851][ T25] audit: type=1400 audit(1621146870.817:113): avc: denied { create } for pid=29668 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:su_exec_t:s0 tclass=appletalk_socket permissive=1 06:34:30 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 872.305142][T29689] FAULT_INJECTION: forcing a failure. [ 872.305142][T29689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.319722][T29689] CPU: 1 PID: 29689 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 872.329637][T29689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.339817][T29689] Call Trace: [ 872.343212][T29689] dump_stack+0x137/0x19d [ 872.348108][T29689] should_fail+0x23c/0x250 [ 872.352620][T29689] should_fail_usercopy+0x16/0x20 [ 872.357874][T29689] _copy_to_user+0x1c/0x90 [ 872.362659][T29689] tcp_getsockopt+0xaca/0x17d0 [ 872.367628][T29689] ? kstrtoull+0x30e/0x350 [ 872.372102][T29689] ? kstrtouint_from_user+0x104/0x130 [ 872.377584][T29689] ? do_anonymous_page+0x411/0x8b0 [ 872.383320][T29689] ? fsnotify_perm+0x59/0x2e0 [ 872.390219][T29689] ? __fsnotify_parent+0x32f/0x430 06:34:30 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) [ 872.390944][ T25] audit: type=1400 audit(1621146870.897:114): avc: denied { create } for pid=29695 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hald_mac_exec_t:s0 tclass=key_socket permissive=1 [ 872.395881][T29689] ? get_pid_task+0x8b/0xc0 [ 872.395910][T29689] ? selinux_socket_getsockopt+0x7e/0x140 [ 872.395931][T29689] ? vfs_write+0x50c/0x770 [ 872.434750][T29689] sock_common_getsockopt+0x53/0x60 [ 872.440048][T29689] ? sock_recv_errqueue+0x2f0/0x2f0 [ 872.445537][T29689] __sys_getsockopt+0x171/0x1d0 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket(0x15, 0x3, 0x80) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0x3f, 0xfffffffb, 0x9, 0x3f}) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) [ 872.450762][T29689] __x64_sys_getsockopt+0x62/0x70 [ 872.456264][T29689] do_syscall_64+0x4a/0x90 [ 872.460782][T29689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.467408][T29689] RIP: 0033:0x4665d9 [ 872.471715][T29689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.493607][T29689] RSP: 002b:00007f7b7a2f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000100)=""/238, &(0x7f0000000000)=0xee) 06:34:31 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', 0x24) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0xfffffff9, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 872.502177][T29689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 872.510651][T29689] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000003 [ 872.518652][T29689] RBP: 00007f7b7a2f01d0 R08: 00000000200000c0 R09: 0000000000000000 [ 872.526746][T29689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.535065][T29689] R13: 00007ffcd8a419ff R14: 00007f7b7a2f0300 R15: 0000000000022000 06:34:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) 06:34:31 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0x1, 0xfd, 0x81, 0x0, 0x2000000000000000, 0x12280, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x40, 0x1ff}, 0x51000, 0x80000001, 0xa56, 0x1, 0xffff, 0x3, 0x1, 0x0, 0xffff, 0x0, 0x35}, r0, 0x0, 0xffffffffffffffff, 0xb) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:31 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:init_var_run_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) 06:34:31 executing program 3: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000140), &(0x7f0000000040)=""/127, 0x7f}) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x6, 0x401}, @sack_perm, @sack_perm], 0x3) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 06:34:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = socket$inet(0x2, 0x2, 0x7ff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r4, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[r2, r4, r0, r5]}, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socketpair(0x39, 0x4, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @multicast2}, &(0x7f0000000140)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r4, 0x21, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x33, 0x100}, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x4a, 0x0, "ebf95613803f4e8ef983e738c0d8dd1f27d783f5efd1462d9afc1c39f38aef787257b7c39b916d1aad20d13dd56c0ce3cb92e310f6fa67e667e30689b96ed353930657f05a427a65f048d32b56a8748e"}, 0xd8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) [ 872.742778][T29781] FAULT_INJECTION: forcing a failure. [ 872.742778][T29781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.756394][T29781] CPU: 0 PID: 29781 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 872.765634][T29781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.775978][T29781] Call Trace: [ 872.779283][T29781] dump_stack+0x137/0x19d [ 872.783846][T29781] should_fail+0x23c/0x250 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:smartcard_device_t:s0\x00', 0x28) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x284140, 0x0) ioctl$TIOCNXCL(r3, 0x540d) 06:34:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x4, 0x0, &(0x7f00000000c0)) [ 872.788644][T29781] should_fail_usercopy+0x16/0x20 [ 872.793883][T29781] _copy_to_user+0x1c/0x90 [ 872.798574][T29781] simple_read_from_buffer+0xab/0x120 [ 872.804053][T29781] proc_fail_nth_read+0xf6/0x140 [ 872.809344][T29781] ? rw_verify_area+0x136/0x250 [ 872.814500][T29781] ? proc_fault_inject_write+0x200/0x200 [ 872.820479][T29781] vfs_read+0x154/0x5d0 [ 872.824894][T29781] ? __fget_light+0x21b/0x260 [ 872.829734][T29781] ? __cond_resched+0x11/0x40 [ 872.834502][T29781] ksys_read+0xce/0x180 [ 872.838663][T29781] __x64_sys_read+0x3e/0x50 [ 872.843260][T29781] do_syscall_64+0x4a/0x90 [ 872.847949][T29781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.853990][T29781] RIP: 0033:0x41935c [ 872.857978][T29781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 872.878286][T29781] RSP: 002b:00007f7b7a2f0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 872.886886][T29781] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 872.895194][T29781] RDX: 000000000000000f RSI: 00007f7b7a2f01e0 RDI: 0000000000000004 [ 872.903206][T29781] RBP: 00007f7b7a2f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.911266][T29781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.919508][T29781] R13: 00007ffcd8a419ff R14: 00007f7b7a2f0300 R15: 0000000000022000 06:34:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socket(0x2b, 0x4, 0x588ecb64) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x5eef, &(0x7f0000000040)={0x0, 0xa7aa, 0x2, 0x1, 0x13c}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000000c0), 0x0) 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffff9, 0x400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1], 0x1) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) [ 872.943927][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 872.943939][ T25] audit: type=1400 audit(1621146871.527:116): avc: denied { create } for pid=29797 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:smartcard_device_t:s0 tclass=appletalk_socket permissive=1 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xb, 0x2, 0x4, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x808000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_loose}, {@mmap}, {@privport}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x184000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access;', @ANYRESDEC=0xee00, @ANYBLOB="2c6163636573733d616e792c736d61636b6673666c6f6f723db2262c636f6e746578743d73797374656d5f752c736d61636b66737472616e736d7574653dfc232c7365636c6162656c2c00"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x3, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1010820}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x20060000) 06:34:31 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) clone3(&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 06:34:31 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$selinux_attr(r3, &(0x7f00000000c0)='system_u:object_r:insmod_exec_t:s0\x00', 0x23) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$inet_tcp_buf(r0, 0x6, 0xf, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r3 = socket(0x21, 0x2, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x89) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) r7 = syz_open_dev$usbmon(&(0x7f0000000140), 0x74, 0x88100) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x1, 0x9, 0x2, 0x8000, 0x17, "e0097de82a6b2321"}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x80800) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x200000000000000) ioctl$VT_WAITACTIVE(r5, 0x5607) 06:34:31 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r2 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0xc22, 0x8, 0x1000, 0x7, 0x12, "65b8fcbeb10ad429"}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @empty}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xffffffffffffff37) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e40)={0x794, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb10}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3dc7b3bf}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe1d3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x794}, 0x1, 0x0, 0x0, 0xc801}, 0x24040813) 06:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\'[.{\x00', 0x0, r1) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)=0x4) 06:34:31 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040046}, 0x80) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, r1, 0x8000000) io_uring_setup(0x1859, &(0x7f0000000080)={0x0, 0xd2a, 0xa, 0x40003, 0x3d1}) 06:34:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x69839) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) 06:34:31 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0xff, 0xb9, 0x45, 0x0, 0x3, 0x21000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x2c42, 0xf0, 0x9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, r0, 0x8, 0xffffffffffffffff, 0xa) r1 = syz_open_pts(0xffffffffffffffff, 0x200800) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x0, 0x5f1, 0x46da, 0xb2cb, 0x103}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x29, 0x0, &(0x7f00000000c0)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 06:34:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x5, 0x8}, @timestamp, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x9}, @mss={0x2, 0x3f}], 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @sack_perm], 0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="14f82d9ffb1bb8cfaee2cef111509456", 0x10) 06:34:32 executing program 5: r0 = syz_io_uring_setup(0x3cbe, &(0x7f0000000000)={0x0, 0x8128, 0x0, 0x2, 0x2ae}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) clone3(&(0x7f0000000440)={0x10004800, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x2a}, &(0x7f0000000240)=""/233, 0xe9, &(0x7f0000000340)=""/178, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) r3 = syz_open_pts(0xffffffffffffffff, 0xa0000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:setrans_exec_t:s0\x00', 0xfffffffffffffeb5) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x5540, 0x85e8, 0x1, &(0x7f0000000000)={[0x6]}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xef}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c0) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) 06:34:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="da15abe3f1204c08902942b09b52d644", 0x10) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:insmod_exec_t:s0\x00', 0x23) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x50) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xa, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:32 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) socketpair(0x23, 0x6, 0x2, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000040)) 06:34:32 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) [ 873.639628][ T25] audit: type=1400 audit(1621146872.217:117): avc: denied { create } for pid=29975 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=key_socket permissive=1 06:34:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x8) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getuid() setuid(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}, {@access_user}, {@mmap}, {@aname={'aname', 0x3d, '^+(\'[('}}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr}, {@seclabel}]}}) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000280)={0xc29, 0x1ff, 0x2, 0x2, 0xd, "a725594c1b056e8c"}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) openat$cgroup(r2, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f703000425bd7000fed27b6141099d432dfa39d2dbdf2507000000070000002eda5ae618772f66696cf061b32bd8b141f9850c1c866650ee7eb243311ecd2fed910852c0bd9259b5112ed9742a88773a182b68ad57dbe7445ca9f28accbac0ca24f9956ac2e865194b6aefd7bad1cef89334cd5125b044b8778723802d90d165c578fcff1d385cb00cb79b19c053360d1ada8e5110ab704ba912f649cc79efe6ee458dc1085ccaa94d1fdc8fad388ed1faa407888c1bced10952ee9ece541fdaa270500cf6ff45adee0e"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4004000) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000002c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000099408dd91b0f3854bfed7e954e9f4fab80e62954eed7e2d21a3dcff5adc01903a30333f5611d4a19c46307180f8b6526b2303372b9021660029aecd95613e92fc1ecbab38f7bd82a7dd4b2da836ffea8ed57117f14da155995a6a5f942b390062e3b2e1e86c6c86f32a88735b531ac28ff156730004fc00"/139, @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf25050000000c00050021010000000000000c000400000100000000000008000100000000000c00080002000000000000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20080000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x6) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', 0x0, r0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='+R(%$\'@!&\x00', 0x0, r1) getpgid(0x0) clone3(0x0, 0x0) clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) getpgid(r3) r4 = clone3(&(0x7f0000000240)={0xc34c5446f2e68dc4, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r3], 0x1}, 0x58) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/cgroup\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x7fffffff, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000340), r2) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 06:34:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, 0x50, r1, 0xa9) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xf21e, 0x4) 06:34:32 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000), 0x4800) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x20, 0x0, "a5aee5fe71fde88f2bfeec5d9d94b83693d957e7b708dbff2dda1557441714281ef10f58b9b957d3bfd424026966641ff0889a92e0e77ed4269320663dc5b02982fba35d86c02b98d0d8f4f2925cb5c2"}, 0xf1) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x11, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c001800ae5fa6edece6b1a467b89a2c275b908e8670802e99f6acf19f40d7e35e43ba01a547b65706b24c024b7560d300bc", @ANYRES16=r3, @ANYBLOB="000225bd7000fedbdf25010000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40802}, 0x11) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket(0x11, 0x4, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 06:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 06:34:32 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/202, 0xca) 06:34:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x890) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xc3c4) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0x2, 0x0, 0x2f}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x3, 0x1}}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x9, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000180)='veth0\x00', 0x40, 0x2, 0x800}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @private}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @empty}, &(0x7f0000000400)=0xc) write$eventfd(0xffffffffffffffff, &(0x7f00000002c0)=0x76, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @rand_addr, @remote}, &(0x7f00000005c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @private}, &(0x7f0000000640)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB='p\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2501000000080001001877b255f9f0de1adbeb2304f08851ac1f31d27164aedc7e", @ANYRES32=r2, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="d00002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040085a5000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000180000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000004000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003800110024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="5c0102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400090001a606000000ff07000008000000ff0101039f0500000600fc030100000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004006c21000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="6401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040000041f7f0700000007000700cf9d000005008033d30b000002000000008000000300050100080000008009050800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x878}}, 0x24000814) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r13, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x15, 0x0, &(0x7f00000000c0)=0x4) 06:34:32 executing program 2: io_uring_setup(0x1cb7, &(0x7f0000000080)={0x0, 0xb5e2, 0x10, 0x0, 0xf4}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:32 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) 06:34:33 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x1266}, @sack_perm, @sack_perm, @window={0x3, 0x9, 0x4}, @timestamp, @sack_perm], 0x6) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) [ 874.420634][ T25] audit: type=1400 audit(1621146872.997:118): avc: denied { create } for pid=30137 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hald_sonypic_exec_t:s0 tclass=key_socket permissive=1 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/4096, &(0x7f0000000040)=0x1000) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) 06:34:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000005) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r12 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r12) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 06:34:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) 06:34:33 executing program 5: modify_ldt$read(0x0, &(0x7f0000000000)=""/132, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:33 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @initdev}, &(0x7f0000000180)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000034) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) socketpair(0x1a, 0x2, 0x7, &(0x7f0000000040)) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @broadcast}, &(0x7f00000001c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @empty}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast1, @remote}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast1}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x15ec3ac76e5a2986}, 0xc, &(0x7f0000000900)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="28050000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="5bff07000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100000001007072696f72697479000000000000000000000000000000000000000000000000000003000e000000000004000000000000000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000023fe0100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400c9e7000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r4, @ANYBLOB="38000100370001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f5c8000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="140102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004007f00000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d657468e8766adc6bffb7bc3a9c6f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x528}}, 0x0) 06:34:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 06:34:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4c2a4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = getuid() setuid(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [{@smackfsfloor}, {@measure}, {@dont_measure}, {@euid_lt={'euid<', r2}}]}}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0xc, 0x810, r3, 0x0) 06:34:33 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000000)=0xfff2) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r1 = socket(0x0, 0x80000, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@access_client}, {}, {@afid={'afid', 0x3d, 0xb708}}, {@version_u}], [{@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'system_u:object_r:sound_device_t:s0\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_appraise}]}}) 06:34:33 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x2b, 0x0, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRES16=r5, @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x44104}, 0x20000000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) 06:34:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 06:34:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:etc_mail_t:s0\x00', 0x20) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x2004}, 0x4) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x810, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40081) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7ff) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x34, 0x8, 0x2, 0x6, 0x2, "5bad858c6028368542b40ca288cf5f37fa3a4a"}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x76}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x40800) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) 06:34:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @timestamp], 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:33 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x22, 0x0, &(0x7f00000000c0)=0x4) [ 875.119349][ T25] audit: type=1400 audit(1621146873.697:119): avc: denied { create } for pid=30306 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=key_socket permissive=1 06:34:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000280), 0x2, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r2 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r7 = getpgid(r4) r8 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r11 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r13 = getpgid(r10) clone3(&(0x7f0000000780)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/235, 0xf3, 0x0, &(0x7f0000000340)=[r9, 0xffffffffffffffff, r12, r13, r9, 0x0, r8, r9], 0x8, {r11}}, 0xffffffe6) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {0x2f}, &(0x7f0000000680)=""/256, 0x100, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r3, r3, r9, r3, 0x0], 0x9, {r5}}, 0x58) sched_getscheduler(r2) 06:34:33 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x3c100) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3a44000}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) [ 875.222960][ T25] audit: type=1400 audit(1621146873.777:120): avc: denied { create } for pid=30306 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=rawip_socket permissive=1 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 0: clone3(&(0x7f0000001840)={0x1100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000840) 06:34:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)=0x4) 06:34:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x15c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d79}}}]}}, {{0x8, 0x1, r2}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x90b8, 0x2, 0x3f, 0x1}, {0x100, 0x16, 0x1, 0x1f}, {0x7, 0x4, 0x9, 0x8}, {0xa9, 0x5, 0x70, 0x1}, {0x1, 0x0, 0x3f, 0x9}, {0xdba, 0xff, 0x80, 0x3}, {0x9, 0x3f, 0x20, 0xfff}, {0x4, 0x6, 0x8, 0x7}, {0xfb, 0x0, 0x8, 0x3}, {0x4, 0x25, 0x8, 0x40}]}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) read$usbmon(r1, &(0x7f0000000000)=""/170, 0xaa) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x11db8d) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7edf, @remote, 0x5}}, 0x0, 0x0, 0x19, 0x0, "d4a21454767f9d30d7458aa3158df8db28629f614323fac44d298e8ef225fd87ec448d006a8d32a7ef8909c8382f0958788e176803d73d0651c4a50453d2de0209dc8a451adedfee2020d01e794d1ee9"}, 0xd8) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x25, 0x0, &(0x7f00000000c0)=0x4) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x6) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 06:34:34 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:apt_lock_t:s0\x00', 0x20) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:34 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x1f, 0x7, 0x40, 0x1f, 0x0, 0x800, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5ea2, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x6, 0x1, 0x100, 0x6, 0xd82, 0x7, 0x4cce, 0x0, 0x4, 0x0, 0x5}, r0, 0xc, r1, 0x7) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x5, 0x9, 0x2, 0xff, 0x3f, "2aeb3975ba440d61eca0ecb8dc219632d541f0", 0x4, 0xfffffffd}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x2) [ 875.488355][ T25] audit: type=1400 audit(1621146874.067:121): avc: denied { create } for pid=30397 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:apt_lock_t:s0 tclass=appletalk_socket permissive=1 06:34:34 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r1 = syz_io_uring_setup(0x3d4, &(0x7f0000000080)={0x0, 0x6df7, 0x2, 0x1, 0x21c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2, r3, r0], 0x3) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000001c0)) 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @hci={0x1f, 0x0, 0x2}, @llc={0x1a, 0x8, 0x8, 0x7f, 0x8, 0x8a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfcf, 0x9, 0x8}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf250400000018000180140004000000000000000000000000000000000108000200030000003c0001800500020001000000060001000a00000008000300ffffffff08000300ac1e000108000700", @ANYRES32=r3, @ANYBLOB="0800070032c948d5a4221ea3178f20b421c1523310bc0156ea7a3f04b434cf4ca40d135a61014ce9547c050ecb7dc7", @ANYRES32=0x0, @ANYBLOB="0600010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x48041) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25060000000800030007000000080002000400000008000200010000000800020001000000d7d089843df9b116ca9c9ce1e22a93cbdf6b2b3863d8d19e32e3e526ac8514bf9a7fe768af73acac84fe2aabee5245cc6542ef95a3e1614a26f9c99c83ffa1f43ad9b815182fdee01c26859bb12afc8cddf13a7e82bd280978f544c73fd0beb068b2af2414b8ce77a6181bcadfd30b1db57b472a949555aac7d460a53e493b00"/186], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r8 = syz_open_pts(0xffffffffffffffff, 0x80) r9 = openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000740)={0x0, @loopback, @remote}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="df08000100", @ANYRES32=r3, @ANYBLOB="04000280080001003d5172a89609db8cb35da3d555abb533769acda12ca5fba6a66c3f7c7b274432d65b7a9b171c3556caec72cd1a75cc1129ac8ec4b2da291a0e48e6f0425a2075418cf7e64edc7621ea71d5b0a4b6cf50d54a445e7b5b032b0245e3ec7a83c6c3b733b393210c11bb8e6a20d575866211ab6e5b24ee049276a4160932becde51a678cf2909ca06eaf57644b1e3404f425f854b71d55b4cc0739ef45bbc9b501e01fde4aea493f81f12bd4a72ee1652ac53192ca917fd18f29de8576d265266c782fde4ad364f5e871", @ANYRES32=r3, @ANYBLOB="700002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='$*\v$(\xef$\x00', 0x0, r8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0xfff, 0x8}, @window={0x3, 0x7fff, 0x4}, @sack_perm, @window={0x3, 0x3, 0xe8}], 0x6) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x3) 06:34:34 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000000)) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r2 = fsmount(0xffffffffffffffff, 0x0, 0x85) r3 = eventfd(0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff, r3, r4, r0, r5, r1, r6, r7], 0x9) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20802, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '---[\'&\xd9'}}, {@afid={'afid', 0x3d, 0x81}}, {@nodevmap}, {@access_any}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r10}}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '['}}]}}) r11 = syz_io_uring_setup(0x6c5c, &(0x7f0000000200)={0x0, 0x4a2, 0x2, 0x3, 0xfe, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) nanosleep(&(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r11, 0x10000000) 06:34:34 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) r3 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x5) 06:34:34 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x4, 0x63, 0x3ff, 0x8, 0x1, "7d05daad32173f42"}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x4, 0x85, 0x1, 0x0, 0x10000, 0x10, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x200, 0x8, 0xcf, 0x8, 0xb00000000000, 0x6, 0x7, 0x0, 0x9, 0x0, 0x5ab}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x1000}, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r1 = socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r4, r1], 0x2) 06:34:34 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x0, @ipx={0x4, 0x4, 0x7ff, "438fa52b8b1a", 0x9}, @ax25={0x3, @default, 0x6}, @generic={0x4, "b7f90b938ccb8b71441526c36378"}, 0x9, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='lo\x00', 0x1, 0x9, 0x6}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r1, 0x6, 0x36, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x110, r2, 0x4) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) 06:34:34 executing program 0: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x7fffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet(0x2, 0x80006, 0xfffffff7) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[r0, r1, r2]}, 0x3) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x6) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)=0x1) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000140)=""/99, 0x63) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x0, 0x9}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 06:34:34 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', &(0x7f00000000c0)="d9be4627ff6931b1175b15115fdf114edf28e44daa4d28242880a81276dce8260fe83b386489384c24eedfd9ffa6fbf7e6e83207209b758abeb2c7de9c825368114cfc2500feb753e6bc273ab4f2ed42d71a771e4a71ca311c1893afc86d75500118fd34fba850cbe5777d053350a1235c37e23eac7d5f45c9700c3febe89742b563f9083da45a", 0x87) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x3, 0xb, 0x21da, &(0x7f0000000200)}) socketpair(0x2b, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x2, 0x0, "192466afd9eb11fedc4768117054c8ff40d4790b1413dae7e86fdd21e8a245f56f0874fd7a2ab98344e1dec9cf6bf13c21f1fc6993c9f03480e7b2cc222315a665bfd81da04c190e7385432bca2849f3"}, 0xd8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x1a, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xab}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20044893) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000040)='system_u:object_r:anacron_exec_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x8, 0x80000001, 0x0, 0x401, 0x2}) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x7) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) set_thread_area(&(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0xfffc}, @mss={0x2, 0x81}, @timestamp, @timestamp, @timestamp, @timestamp, @mss, @mss={0x2, 0x9}], 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x80, 0x20, 0x4, 0x5, 0x0, 0x2, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x401, 0x2}, 0x100, 0x3, 0x9, 0x2, 0x3c70, 0xaac, 0x0, 0x0, 0xffff, 0x0, 0x6b}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) ioctl$KDDISABIO(r4, 0x4b37) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x87ab, @mcast2, 0x3}}, 0x0, 0x0, 0x28, 0x0, "5fb85cbf1d4460e1e2f7ca06aa3a68bee8ab19edc2b6d8c5b35310357e51c8cfe2977e0540a5627888a8e61a6e4a9910cc5e10bc013db6fbf6c8677ac6629bb83df04f5d03ed01d3b552b6f6beb69812"}, 0xd8) r6 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7747de6a85692de1ef1a42d93f43d16424081f99ea1c090fe9f3505bf695bcfc1993733ffa030a92a3a4a6eaa6e238687ef979ea18b723052daacdcc71288515d1fd5b85f59ab7469cd3137ce0bbef51e56556ebeea26d98d9f3b6df893e7533ab85d903336c36ad8768a588b4dc77fe67dec3e43b2831d361d0b26d9b22cd364f7200"/144, @ANYRESHEX=r1, @ANYBLOB=',aname=system_u:object_r:sound_device_t:s0\x00,version=9p2000.u,access=client,posixacl,cache=fscache,fscontext=sysadm_u,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x8) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @ipx={0x4, 0xff, 0xfffff800, "e71e8cb1e2cf"}, @generic={0x1f, "07f4656372715961b52091bfadee"}, @hci, 0x400, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='syzkaller0\x00', 0x1, 0x7, 0x2}) [ 876.014613][ T25] audit: type=1400 audit(1621146874.597:122): avc: denied { create } for pid=30526 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:anacron_exec_t:s0 tclass=key_socket permissive=1 06:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x9) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000100)=[r0, r1, r0, r2]}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xa) 06:34:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) socketpair(0x1d, 0x5, 0x7, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="69558da7ded057d1e43d84575f2be1df", 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf25c14d934deb080003000700000008e202000400"/38, @ANYRES32=r3, @ANYBLOB="08000300e00000020800f94a1af73e7306000200000008000300ffffffff1400040afc010000000000000000000000000001060005004e2000000500020098000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x50) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x7, 0x58000000, 0x2, 0x8, 0x8, "6f95a4941ea45e2aaa18320e9458efcd30f599", 0x400, 0x14}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 06:34:34 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xb) 06:34:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xc) 06:34:34 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socketpair(0x26, 0x3, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @multicast2}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000400)={0x584, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x5, 0x80, 0x39}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x86b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x2000055}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:34 executing program 2: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x4000801) 06:34:34 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1f, 0x8, 0x6, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 06:34:34 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 06:34:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0xd) 06:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) 06:34:35 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x57d}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x41) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x10) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x22, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa8, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040050}, 0x8000) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:35 executing program 2: r0 = getgid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getgroups(0x7, &(0x7f0000000140)=[r0, 0xee00, 0x0, 0xee00, r1, 0xffffffffffffffff, 0xee01]) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) ioctl$KDENABIO(r3, 0x4b36) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 06:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) socketpair(0x6, 0x1, 0x0, &(0x7f00000001c0)) clock_gettime(0x4, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="171d720396a28c4d8245d499ef32994c", 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000080)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/139, 0x8b}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20044010) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x11) 06:34:35 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x5, 0xfc, 0xe3, 0x0, 0x100000001, 0x4000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffe00, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x58d2, 0x6e81, 0x3f, 0x8, 0x9, 0x7, 0x2, 0x0, 0x4, 0x0, 0x100000000000000}, r0, 0xf, 0xffffffffffffffff, 0xb) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000100)=""/146, &(0x7f0000000040)=0x92) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x12) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fsmount(r1, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 4: sched_getscheduler(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x13) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) [ 876.667605][ T25] audit: type=1400 audit(1621146875.247:123): avc: denied { create } for pid=30701 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:iptables_initrc_exec_t:s0 tclass=key_socket permissive=1 06:34:35 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7490}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbaca}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040002}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:34:35 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x14) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) socketpair(0x2, 0x6, 0x2, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, &(0x7f0000000000)) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet(0x2, 0x1, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[r1]}, 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x15) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/2, 0x2}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xf, 0x3, 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 06:34:35 executing program 5: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x82}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x273, 0x4) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x17) 06:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x226000, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCNXCL(r1, 0x540d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x1) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket(0x27, 0xa, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)=0x0) clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) getpgid(r4) r5 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r10 = getpgid(r7) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r6, r6, r5, r6], 0x8, {r8}}, 0x58) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r11, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, 0xfffffffffffffffd, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) clone3(&(0x7f0000000380)={0x1001000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x3b}, &(0x7f0000000180)=""/115, 0x73, &(0x7f0000000200)=""/239, &(0x7f0000000340)=[0xffffffffffffffff, r3, 0x0, 0x0, 0xffffffffffffffff, r4, r10, 0xffffffffffffffff], 0x8, {r2}}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:autofs_device_t:s0\x00', 0x25) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x200, 0x40201) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) write$selinux_attr(r2, &(0x7f0000000140)='system_u:object_r:initrc_exec_t:s0\x00', 0x23) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r4 = gettid() setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x3}, 0x4) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x2, 0x9, 0x3, 0x0, 0x7, 0x40004, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x4a, 0x23, 0x3, 0x7, 0x13, 0x40, 0x200, 0x0, 0x3a45df10, 0x0, 0x8}, r4, 0xa, 0xffffffffffffffff, 0x1) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) openat$cgroup_ro(r2, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:anacron_exec_t:s0\x00', 0x24) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x18) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x0, 0x0, 0x3a, 0x0, "6e5190736d98298398af77b020691f5cf9fa2dbfc3e3876f2909aa4e634066bde37fffc0b4ffbd123f5bc9791f795fdb3bfc2d5bddcf4b7f3789917ac6b75777b0d2969bf42c583cc6191f6487e6515f"}, 0xd8) [ 877.103792][ T25] audit: type=1400 audit(1621146875.687:124): avc: denied { create } for pid=30819 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=appletalk_socket permissive=1 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x19) 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:hald_log_t:s0\x00', 0x20) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xf, 0x4, 0x80, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0xb30}, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1a) [ 877.240698][ T25] audit: type=1400 audit(1621146875.817:125): avc: denied { create } for pid=30847 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hald_log_t:s0 tclass=appletalk_socket permissive=1 06:34:35 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 06:34:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 06:34:35 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:watchdog_device_t:s0\x00', 0x27) r1 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 06:34:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000000200)={0x200008800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3f}, &(0x7f0000000100)=""/32, 0x20, &(0x7f0000000140)=""/51, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 06:34:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1b) 06:34:36 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x274, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x40, 0x3, 0x2}, {0x7, 0x2, 0x2, 0xe8}, {0x0, 0xf1, 0x6, 0xff}, {0x7, 0x7, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xb65, 0xf7, 0x4, 0xff}, {0x0, 0x4, 0x0, 0x10001}, {0x1, 0x81, 0x9, 0x7f}, {0x9, 0xc0, 0x7, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x40004}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @initdev, @multicast2}, &(0x7f0000000600)=0xc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @initdev, @dev}, &(0x7f0000000680)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @dev, @initdev}, &(0x7f0000000780)=0xc) r9 = openat$cgroup_ro(r3, &(0x7f00000006c0)='cgroup.stat\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r9, 0x401) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r11, 0x40045431, 0x0) r12 = socket$inet(0x2, 0x5, 0x401) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000700)=[r12, r10, r6, r2, r10, r3, r6, r11], 0x8) ioctl$MON_IOCQ_RING_SIZE(r11, 0x9205) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000010c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001140)=ANY=[@ANYBLOB="94080000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="2c02028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000001ae8002000000060044200800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000180000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400cf00000008000100", @ANYRES32=r0, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040081000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r5, @ANYBLOB="a4010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r1, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040003000402ff7f0000400000ad8000000001000209500600004800f900080000000700c1074000000008000100", @ANYRES32=r0, @ANYBLOB="ac010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="a401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100008038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x894}, 0x1, 0x0, 0x0, 0x8804}, 0x4008800) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r13, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 3: clock_getres(0x0, &(0x7f0000000000)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @ethernet={0x306, @random="f0a19b3fddf3"}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, @hci={0x1f, 0x2, 0x4}, 0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x6, 0xfff7}) 06:34:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1b485597) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) 06:34:36 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1c) 06:34:36 executing program 3: clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2b}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) getpgid(r0) sched_getscheduler(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:devicekit_var_lib_t:s0\x00', 0x29) 06:34:36 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)=0x2f) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1d) 06:34:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x4, 0xeca) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:34:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 06:34:36 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0x4, 0x7, 0x80, 0x7fff, 0x10, "a95c9b702884c63b"}) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) getitimer(0x2, &(0x7f00000000c0)) 06:34:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000012c0), 0x0) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1e) 06:34:36 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d0, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4a77}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) socketpair(0x36, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @timestamp], 0x3) 06:34:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e30, 0x3ff, @rand_addr=' \x01\x00', 0x5}}, 0x0, 0x0, 0x38, 0x0, "95dd2bb46d35b6a909fe8dc84926be5d42b539298e1c455451358f6bd6645ec5d08f4fc8f3c0d2793d3d8cc2d687c4066ffd5ff5c307899ecbc20f714e50871d253b7333f51ea5519ac4cd601e1c25c5"}, 0xd8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xb62, 0x7ff}, @window={0x3, 0x3f, 0x2}, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm], 0x7) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x21) 06:34:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000080)='devices.deny\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) 06:34:36 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:36 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = fsmount(r1, 0x1, 0x8) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='[@+/&\x00', 0x0, r3) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)=0xfffffffffffffe53) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x22) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1800011}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x124, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4051}, 0x840) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x1, 0x3f, 0x7, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x40020, 0x7, 0x7a2, 0x9, 0x3, 0x3, 0x4e, 0x0, 0xffff, 0x0, 0x1131}, 0xffffffffffffffff, 0xd, r1, 0x6) openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x23) 06:34:36 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x54) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x81, 0x40, 0x6, 0x9, 0x0, 0xc68, 0x4080, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_config_ext={0x6193, 0x8}, 0x1844, 0x7, 0x8, 0x1, 0x100000000, 0xded, 0x84, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xb, r1, 0x8) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) 06:34:36 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:36 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:mqueue_spool_t:s0\x00', 0xfffffffffffffd0d) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) syz_open_pts(r2, 0x80000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:getty_var_run_t:s0\x00', 0x25) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:crond_exec_t:s0\x00', 0x22) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000240)) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7ff, 0x220000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340), 0x4) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/87, 0x57}) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0x29, 0xa, 0xad, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x64}}, 0x0, 0x0, 0x2f, 0x0, "8e1cad807c7a224861c4a5207fb5e293ac1079c7647b765073195bcdbb840907b3f5598599aba638466d5964ff7d29c6cdb1b63d2cf003e2577a28dea50e9bd65116f22f36b718cd320b4e3aba29de7d"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300), 0x4) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x24) 06:34:36 executing program 4: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x4}, @xdp={0x2c, 0xa, 0x0, 0x32}, @hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='macsec0\x00', 0x2, 0x693, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r5 = getpgid(0x0) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0x0, 0x0, 0x0, 0x0], 0x8, {r3}}, 0x58) sched_getscheduler(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast1, @multicast1}, &(0x7f00000004c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @loopback, @multicast1}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB="c0060000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400bb00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ed8f000008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a00102806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000300055a0001000001803f1f34ffffff0600010301000100050080230300000008000805000000000900c6060300000020002703ff00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0f000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b757000000000000000000000000010000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r7, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400d29a070100000000060008058b0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400050000000800070000000000"], 0x6c0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000dc0)={0x0, @can={0x1d, 0x0}, @tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x4}}, @ax25={0x3, @default, 0x5}, 0x101, 0x0, 0x0, 0x0, 0x101, 0x0, 0x2, 0x7, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4eefdc4a9d7e86b5}, 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="d4010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="f00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007f00000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="c000028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008000000008000600", @ANYRES32=r13, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000200000000000050003000b000000140004000900070302000000642909ff3f0000007fac319282f635e62e995bf24e8e726e92154a94c372fea43163291cd639"], 0x1d4}}, 0x2000040) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:36 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:34:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x25) 06:34:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) 06:34:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000000)) 06:34:36 executing program 1: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:36 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0xa, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:36 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x59, 0x6, 0x0, 0x0, 0x3ff, 0x40000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x2002, 0x7, 0x9, 0x9, 0x14f, 0x638, 0x5, 0x0, 0x95, 0x0, 0xffffffff7fffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x2) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:36 executing program 5: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:34:36 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xffff30df, 0x0, &(0x7f0000000080)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x26, 0x6, 0x7) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000000)) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = fsmount(0xffffffffffffffff, 0x1, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)=""/139, &(0x7f0000000080)=0x8b) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:34:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @timestamp], 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 3: r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='*)}/$\x00', 0x0, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:inetd_exec_t:s0\x00', 0x22) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x202b) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x5}, @timestamp, @mss, @mss={0x2, 0x4}, @timestamp], 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0xfffffff9, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) 06:34:37 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f703080028bd7000fbdbdf2507008000f00000002e2f66696c65302e2f66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) 06:34:37 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x1, 0x79, 0x3f}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4012, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@nodevmap}, {@version_u}, {@privport}, {@cachetag={'cachetag', 0x3d, 'system_u:object_r:ipmi_device_t:s0\x00'}}, {@cache_fscache}, {@nodevmap}, {@uname={'uname', 0x3d, ']'}}, {@cache_loose}, {@msize={'msize', 0x3d, 0xfffffffffffffcb4}}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r4}}]}}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:ipmi_device_t:s0\x00', 0x23) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:37 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="7d37b52dc131a7614b1fd181b4a41191", 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x1}], 0x1) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="f4cba7b6d3d0f96c789177570ee84e90", 0x10) 06:34:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x1e, 0x14f, &(0x7f0000000100)}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) 06:34:37 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000140)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r3) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:ping_exec_t:s0\x00', 0x21) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000180)=""/63, &(0x7f00000001c0)=0x3f) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050031000e000000080004000000000008000600e552fe703c6a84bbb7dbecada3bb6462e153bb96b514e75d153865e10ae3bc4ac4cde08b2764be5c72fcabbf9990f93cb6d169a14508062cd36a85c3902e0123f251f7912d500ad45b4128943361f3d0d6a3f9ab272a5ca13415e49af450b4d7a6d783e2923bdd0a270d11bab87d6d", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040079a4000008000600", @ANYRES32=0x0, @ANYBLOB="96f2cac47289dbc2cd45f5a3ca0861e2bd63cbec8c4c803f86d19ab59759f4f6d175683dec01c612eb0504a9e290d2f303b1ba53dfe590173da7d2080000008cfb7aa5f4190660d4934955a9a8d8f3a9e82f40b4b73e674d"], 0xa0}, 0x1, 0x0, 0x0, 0x20048000}, 0x4044005) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x312, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x20004040) 06:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x1e37, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000008, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2ac, &(0x7f0000000100)={0x0, 0xdfa4, 0x8, 0x3, 0x2c0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000280), r1) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) 06:34:37 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) socketpair(0x2a, 0x6, 0xc23, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x70, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xff, 0x0, 0x3, 0xec7}, {0x6, 0xff, 0x7, 0x6}, {0x7, 0x3d, 0x8, 0x7fffffff}, {0x1, 0xff, 0x5, 0x7}, {0xfffc, 0x40, 0x8, 0x2}, {0xa3, 0x8, 0x20, 0x5}, {0x1f, 0x3, 0x9, 0xffff}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20002080}, 0x40) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x1006023, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) 06:34:37 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 06:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000f703000326bd7000fcdbdf2507000000070000006e1f000000d235423a66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8804) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x20, 0x20, 0x6, 0x3, 0x0, 0x80000000, 0x2, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x1000, 0x6, 0x3, 0x5, 0x2, 0x1, 0x0, 0x0, 0x6, 0x0, 0x100000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x9}, @mss={0x2, 0x7}, @window={0x3, 0x9e5, 0x2}, @timestamp, @sack_perm], 0x5) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000140)='system_u:object_r:lirc_device_t:s0\x00', 0x23) 06:34:37 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) socketpair(0x28, 0x6, 0x80000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='system_u:object_r:s\x1f\x00\x00\x00_device_t:\x1c\xed\x00', 0x0, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x8, 0x0, 0x0, 0xf8, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x4, 0x2, 0x0, 0x5, 0x7, 0x3, 0x0, 0x5, 0x0, 0x10f}, 0x0, 0x8, r4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000200)='dirsync\x00', 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 5: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2c, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x6}}, {@version_9p2000}, {@fscache}], [{@dont_hash}, {@euid_gt}]}}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 4: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ed5, 0x689e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xb, 0x1, 0xb, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000240)=',@\x00', &(0x7f0000000280)="d706054486de029665e66014f89d694c4a7becfb8947cc68f820b9b419031e8c130027cc9b9628bd5d50dcaec79dff9ca3988ab06a1e5d05dcdfff95a30ad7cf2352c85e1dcd12da010e8ad7ed520f1477a93a307d5ce081ef993dad5b148132ea025a18de2ec7c64cedc299e81032d5194492c6d92a6ca8", 0x78) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xc51a5) pipe(&(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xa0, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x300000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4acd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x6, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r1}]}]}, 0xa0}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x1, 0x47bbef61) 06:34:37 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 06:34:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8884) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x50, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r1}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x84}, 0x800) r3 = socket$inet(0x2, 0x800, 0x5) getsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/104, 0x68}) 06:34:37 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40440c4) syz_open_pts(0xffffffffffffffff, 0x400001) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:37 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x7, @local, 0x4}}, 0x0, 0x0, 0x20, 0x0, "1e0366d2ac0a22534b2888ace7f5a9e8441740e2a4a3369b7c1a4ee3e6aafb12713bd0e02ec6c5315f9d5e47eeb21662a506ec506f5f00a10220311d7f0b02adb0ee5aac4794944c1764d81150625fff"}, 0xd8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) read$usbmon(r4, &(0x7f0000000040)=""/118, 0x76) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x8) 06:34:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x6, 0x6, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="b69a759880c73388533e25bb72746608", 0x10) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x6f) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x8c800) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = getuid() setuid(r4) r5 = getuid() setuid(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20400, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@posixacl}, {@uname={'uname', 0x3d, '@}],'}}, {@noextend}, {@access_user}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, 'uid'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r5}}]}}) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:etc_mail_t:s0\x00', 0x20) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4044000) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) syz_open_pts(0xffffffffffffffff, 0x18200) 06:34:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0xea9c51eba37debcb, 0x5) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x10001, @loopback, 0x6}}, 0x0, 0x0, 0x3f, 0x0, "4cb06e9661e5d4fe360bd9c1d999c4e4fa9f7fe53459377ff1895403d0ffa2d710391678005359c7216c313f6fe4c9f860b40d11298b0d6eeb67e4c3541f9d7ce6350f81731cdd8c2fdd37d834dabb39"}, 0xd8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:37 executing program 1: clone3(&(0x7f00000004c0)={0x80004000, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300), {0x33}, &(0x7f0000000340)=""/103, 0x67, &(0x7f00000003c0)=""/138, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r1 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) clone3(&(0x7f0000000580)={0xa800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f0000000100)=""/164, 0xa4, &(0x7f00000001c0)=""/146, &(0x7f0000000540)=[0x0, r0, r1, 0x0], 0x4, {r2}}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:38 executing program 4: prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x80000, 0xd39a) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/123, 0x7b}], 0x1) 06:34:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x29, 0x5, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0)=0x25ba, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x7c, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x88}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x4840) 06:34:38 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x7ff, 0x0, &(0x7f0000000080)=[r2, r3, r0]}, 0x3) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000140)={0x2, 0x7, 0x6, 0x8000, 0x0, "b33c576d5f638c0f"}) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:boot_t:s0\x00', 0x1c) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) 06:34:38 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0xffff0000}}, 0x0, 0x0, 0x16, 0x0, "e0bfda0623e689b571ddaabc7c9fda6baa3dab27d64863b0dfb18298d189e5fd2fe85b06a9969b9f01536551d8b5d908bfe61682e24e1b0fd01ba6e2cc778ed709d3bbdc23729bc65767c37c1162fdf4"}, 0xd8) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @void, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x2f}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) [ 879.628716][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 879.628728][ T25] audit: type=1400 audit(1621146878.207:129): avc: denied { create } for pid=31445 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dpkg_exec_t:s0 tclass=key_socket permissive=1 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4880, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x102) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2, r0, r3, r4, r5, r1, r6, r0, r7], 0x9) 06:34:38 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:var_auth_t:s0\x00', 0xfffffffffffffd62) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) set_thread_area(&(0x7f0000000040)={0x9, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) setns(r1, 0x2000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2e, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c840}, 0x20044081) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/75, &(0x7f0000000080)=0x4b) 06:34:38 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x1000018, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c756e616d653d21217b3a2d2b242c63616368653d6e6f6eebc41e4161df0c1a752b4a652c63616368653d667363", @ANYRES16=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="2c7365636c6162656c2c66736d6167696352304e963030303030303037666666666666662c6f626ad5726f6c653d73797374656d5f753a6f626a6563745f723a736f756e645f6465766963655f743a7330002c736d61636b66736465663d2f70726f632f7468726561642d73656c662f617474722f63757272656e74002c00"]) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)=""/177, &(0x7f0000000500)=0xb1) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) syz_open_dev$usbmon(&(0x7f0000000280), 0x2, 0x90080) write$selinux_attr(r4, &(0x7f00000000c0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/254, 0xfe}], 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)) 06:34:38 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd514d41f58f21e76}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xa02127ef3efcad99}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000014) 06:34:38 executing program 0: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 06:34:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x4f43, 0x7e17, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) [ 879.906986][ T25] audit: type=1401 audit(1621146878.487:130): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='system_u:object_r:sound_device_t:s0\x00', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x1d7b, &(0x7f0000000000)={0x0, 0x18fa, 0x0, 0x4, 0x340}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r1, 0x10000000) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:38 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x8000, 0x4) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socketpair(0x25, 0x80000, 0x7fffffff, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @ax25={0x3, @null}, @nl=@unspec, @can={0x1d, 0x0}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='veth0_to_batadv\x00', 0x5, 0x8, 0x8001}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x0, 0x504, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x63f9d98def049128}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) r1 = fsmount(0xffffffffffffffff, 0x0, 0x81) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, 0x0) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3f}, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) mmap$usbmon(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r2, 0x872e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="313ba54e501fd4103ee65d7548441cb6", 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x1f, 0x7, 0xfffffff7, 0x8, 0x4, "9b401a880db191b1c3345d7f1f39698f3446d1"}) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @broadcast}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, @xdp={0x2c, 0x0, 0x0, 0x22}, @ax25={0x3, @bcast, 0x1}, @nl=@unspec, 0x101, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)='veth1_to_team\x00', 0x7f, 0x9, 0x2}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000080), 0xc, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x5e0, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x8, 0x5, 0x1ff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x5, 0xf5}, {0x4e74, 0x0, 0x3, 0x401}, {0x8, 0xff, 0x5, 0x3}, {0x81, 0x1, 0x0, 0x6}, {0x1, 0x85, 0x0, 0xffffffff}, {0x3f, 0x7, 0x40, 0x7}, {0x9, 0x6, 0xe, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1338}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000)) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x17be, 0x8) 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, 0x0) [ 880.210299][ T25] audit: type=1401 audit(1621146878.788:131): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/75, 0x0) 06:34:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/proc/thread%self/attr/sockcreate\x00', &(0x7f00000000c0)='\x00', 0x0) [ 880.243025][ T25] audit: type=1401 audit(1621146878.818:132): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:38 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) socketpair(0x1f, 0x2, 0x1d, &(0x7f0000000080)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4) 06:34:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 06:34:38 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/100, 0x64}) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:38 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:var_auth_t:s0\x00', 0xfffffffffffffd62) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) [ 880.319306][ T25] audit: type=1401 audit(1621146878.828:133): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:38 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:var_auth_t:s0\x00', 0xfffffffffffffd62) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0x34) 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x2da11) clock_adjtime(0x3, &(0x7f0000000040)={0x6, 0x800, 0x8, 0x7, 0xfffffffffffffff7, 0x0, 0xfd01, 0x3, 0x8, 0x80000001, 0x10001, 0x2, 0x7fffffff, 0xfffffffffffffffd, 0x3ff, 0xf5, 0x3, 0xfffffffffffff801, 0xffff, 0x2bb, 0x0, 0x9, 0x8, 0x800, 0x2, 0xcef0}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @multicast1}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @multicast1}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @multicast2}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @local}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @private, @dev}, &(0x7f00000005c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast2, @remote}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000e40)={0xbac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fe2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c97}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x0, 0xff, 0x1}, {0x2, 0xff, 0x7d, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe2d8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x188e, 0x1f, 0xaa, 0x1f}, {0xca3c, 0x7f, 0x42, 0x7}, {0x9, 0x9, 0x3, 0x79}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8a9}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x7, 0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7974}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd0d}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = fsmount(r1, 0x1, 0x2) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0xfffffffffffffd0d, 0x7f, 0x0, 0x0, 0x1, 0x0, 0xf5, 0x40198, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800003f, 0x1, @perf_config_ext={0x1, 0x7fffffff}, 0x4, 0x0, 0x5, 0x5, 0x7, 0x8, 0x2, 0x0, 0x3, 0x0, 0x8000}, r7, 0xe, r3, 0x4) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) r8 = geteuid() setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x88400, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="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", @ANYRESHEX=r6, @ANYBLOB=',loose,smackfstransmute=)$,euid=', @ANYRESDEC=r8, @ANYBLOB=',\x00']) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080)={0xfffffff7}, 0x4) 06:34:39 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:39 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b) write$selinux_attr(r0, &(0x7f0000000080)='/usr/lib/telepathy/mission-control-5\x00', 0x25) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCCBRK(r1, 0x5428) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:39 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:var_auth_t:s0\x00', 0xfffffffffffffd62) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 1: getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:39 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:var_auth_t:s0\x00', 0xfffffffffffffd62) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) 06:34:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) [ 880.495233][ T25] audit: type=1400 audit(1621146879.078:134): avc: denied { create } for pid=31652 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=key_socket permissive=1 06:34:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x5, 0x3, 0x5578}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xc0189436, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x1f, 0x2, 0x40, 0x15, 0xc, "be49204116a95164b8038e0e84e9cecf5b219a"}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)=' \x01\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e33, 0x7, @rand_addr=' \x01\x00', 0x20}}, 0x0, 0x0, 0x9, 0x0, "7989d1a51cf2c8678210ac666b9ae51d2b1f7b183731534c66ff03f557de49cc68d2c819636d59dae6e2fb57c618e4ab3611caa7bd54abd06bd1c365a3ca9078889f3bd9fbba204dd738d559f57203fe"}, 0xd8) 06:34:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf2531000000080001000f0000000c009900fdffffff7c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8850}, 0x600c081) 06:34:39 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) eventfd(0xbb) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:modules_object_t:s0\x00', 0x26) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='system_u:object_r:sound_device_t:s0\x00', 0x0, r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="01002c9d7000fbdbdf2502000000080003000300000030000180050002002000000014000400ff02000000000000000000001000000108000700", @ANYRES32=0x0, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @multicast1}, &(0x7f00000002c0)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @generic={0xb, "b4c73916d4975e0532c4f8ee85fb"}, @xdp={0x2c, 0xc, r2, 0x2c}, @ethernet={0x306, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1ff, 0x6, 0x20}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000062) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:39 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000240)="38a77efcc8117746d642ac3381776edc", 0x10) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x800, 0x2}, @mss={0x2, 0x7fffffff}, @window={0x3, 0x400, 0x2}, @mss={0x2, 0x7f}, @timestamp, @mss={0x2, 0xe74}, @sack_perm], 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000427bd7000fcdbdf250200000024fb078008000100", @ANYRES32, @ANYBLOB="0800010065d18f37d65a5ef478669c6f245ff0c7dd04bf2a20b6795e9d5cd4e9cffbcea1cb1f10faa73da9698e478bd497b4b6705d5df12b69af6c7543ef87ec6e7d", @ANYRES32, @ANYRESHEX=r3, @ANYRES32, @ANYRESDEC=r5, @ANYRES32=r1, @ANYBLOB="08000100000000000c0006000100000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20040004) 06:34:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000100)=""/10, &(0x7f0000000040)=0xa) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) 06:34:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 06:34:39 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) 06:34:39 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x23, 0xa, 0x1f) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 06:34:39 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) 06:34:39 executing program 3: fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) 06:34:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000180)=""/124, &(0x7f0000000200)=0x7c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4c895) 06:34:39 executing program 5: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x69721f3f541f44fe}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f70300042bbd7000ffdbdf2507000000070000002e2f66692f27174aef036c65302e2f6616df186d5d5a78afa572198a35dce63da6e78b87d2b6f9f0115453f62684229e5f3421e8ce2a501f06c11ce26cf2567724ccf9e6056e30a73c89730b432e351f9c4b90c1c98113bf540c9ab404bfe3535cbbe168a11523ff10babc460fa7b9904dc59b4ae2e66239440bc8c4ad71b42d881da4c3005a2899f33168fad65059b50cddc68c5e9b54550b6c5a9ba7"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:39 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x10000) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080), 0x4) 06:34:39 executing program 3: fspick(0xffffffffffffff9c, 0x0, 0x0) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) 06:34:39 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000180)=""/213, &(0x7f0000000280)=0xd5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000100)=""/103, &(0x7f0000000080)=0x67) getsockopt$inet_tcp_buf(r1, 0x6, 0x5, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/78, 0x4e) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) 06:34:39 executing program 3: fspick(0xffffffffffffff9c, 0x0, 0x0) 06:34:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x21, 0x6, 0xff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:39 executing program 3: fspick(0xffffffffffffff9c, 0x0, 0x0) 06:34:39 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x6a}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000044) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:39 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 06:34:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="55ce3569eb1045711a53381d30dcf183", 0x10) 06:34:39 executing program 2: socketpair(0x2, 0x800, 0x3c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @dev, @empty}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f00000006c0)={0x4a4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7bdf8426}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x3d, 0x4, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x500}}}]}}]}, 0x4a4}}, 0x4004045) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:39 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000100)=""/242, &(0x7f0000000040)=0xf2) 06:34:39 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) socketpair(0x1f, 0x2, 0x1d, &(0x7f0000000080)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4) 06:34:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:39 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='/#}/.},\x00', &(0x7f0000000040)='./file0\x00', r0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x31}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0xe031}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)) [ 881.199442][ T25] audit: type=1401 audit(1621146879.778:135): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x3}, @timestamp], 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}, 0x0, 0x0, 0x41, 0x0, "8207970114f6f825c8845044a33597405acbaa6faf769ba0dffae16221cc01bd564a9e3e6aff7492eaacf059b721cf23fcca3e10f69d418eb2ff6a122b811c7672f9d249a15284e001e9503f7c19d6eb"}, 0xd8) 06:34:39 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) socketpair(0x1f, 0x2, 0x1d, &(0x7f0000000080)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4) 06:34:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 06:34:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) [ 881.270762][ T25] audit: type=1401 audit(1621146879.848:136): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 06:34:39 executing program 0: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c) 06:34:39 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x4201) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 06:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 06:34:39 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) socketpair(0x1f, 0x2, 0x1d, &(0x7f0000000080)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4) 06:34:39 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000040)="f084c2261d387478820672bc0aaf3de9f57f5205579c4e5ee03f9dd1cfb2b13e52a9447a2f58a14e5fe090b3ae58890ad657252e65b8bdc63879b969b6b2f04d45093bad6e7590accc", 0x49) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:40 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, 0x0, &(0x7f0000000080)) setns(0xffffffffffffffff, 0x4000000) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000)=0x3d) [ 881.417525][ T25] audit: type=1400 audit(1621146879.998:137): avc: denied { create } for pid=31903 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devicekit_power_exec_t:s0 tclass=appletalk_socket permissive=1 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) socketpair(0x1f, 0x2, 0x1d, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_setup(0x5c84, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0x1af}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180), 0x1) 06:34:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x93}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001) 06:34:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000001c2b95eeb8111ec353396835f2c906589190d1a260920ed22fe90b1306743f2206e41d474047f3be0bd23c01325d43e96db8435a6ca235359848edc33eb3eb293524af6af7e2bcc3b6636697c2214503261430e3fa266454e53a44a0ace1b6ed56f2b4a2ead7f5059fe5f4c4a3ee5d9fcca45b9b4a67690032f56ce3f427ff25e278ef2e634f2cb60175ca8a661e90894ca6d66a5883a62844d66f87e3e255e2dad31b", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf25000000000800020001000000080008000100000008000700", @ANYRES32, @ANYBLOB="080008000000001000000000", @ANYRES32=r3, @ANYBLOB="080009000300000008000700", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x44) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) 06:34:40 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 0: newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getegid() r1 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f0000000140)=[0x0, 0x0, r0, r2, r1]) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x8) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2d}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x1) 06:34:40 executing program 5: socketpair(0x28, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xcc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket(0x1f, 0x1, 0x40) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7080fcdbdf2504df09eed084c1ef138568309f00000008000200050000000800020007000000081c0950c79f0700000000000000000008000200048114359d7d74115b060000792451cecdc30000"], 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x8054) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, @isdn={0x22, 0x5, 0x9, 0xff, 0x40}, @phonet={0x23, 0x90, 0x40, 0x1}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x2, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000200)='tunl0\x00', 0x1, 0x8000, 0x3f}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffff}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x480000, 0xd}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}}, 0x4000c001) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0xac, 0x0, 0x8, 0x0, 0x9, 0x20086, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x2, 0x100000001}, 0x100, 0x2bc, 0x9, 0x7, 0x6, 0xf55f, 0xc84, 0x0, 0x20, 0x0, 0xb42}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r3, r4, r0, r0, r5, r0]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x50, 0xffffffffffffffff, 0x8000000) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) setns(0xffffffffffffffff, 0x8000000) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socketpair(0x5, 0x2, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="5e398eb9a7ff12dffa3af28921d05162", 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[r1, r3], 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:34:40 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0x5, 0x3, 0x3a) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080), 0x1) r2 = io_uring_setup(0x5002, &(0x7f00000000c0)={0x0, 0xbc97, 0x4, 0x0, 0x3e3}) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) r1 = syz_open_pts(0xffffffffffffffff, 0x2540) ioctl$TIOCSCTTY(r1, 0x540e, 0x3) 06:34:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x1e) 06:34:40 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:sudo_exec_t:s0\x00', 0x21) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0xb1, @loopback, 0x6}}, 0x0, 0x0, 0x3c, 0x0, "b65d3e297cab0645bcd094c2c9f36d29f45bd3045e9737111010f9bb20f6ffa581f3ef7e3ac8d5a346ed1e7e753f17a8dbaa141d8fd50f9f9e03aadd318d33bc85ef09493acf1682a8668bdeef5ef3eb"}, 0xd8) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x81) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)=0xffffffffffffff73) 06:34:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000040)) [ 881.934968][ T25] audit: type=1400 audit(1621146880.518:138): avc: denied { create } for pid=32053 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=appletalk_socket permissive=1 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r0, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x3, 0x3000, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:40 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) 06:34:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x2d, 0x0, "2821f7d96f67f4a3a12033cd572479aee20a3657d654bd46f89319bddc6ebb51a936f30df5891553a470da5130de0bf5a0e05b057445f70a3c5f2d127f2507961a575234d314c23b0b7cea4794417c06"}, 0xd8) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000040), &(0x7f0000000140)=""/47, 0x2f}) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x7f, 0x64, 0x7, 0xc795, 0x18, "b26fb722a7a8577799a6ae166afbe7b00e9edb"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/195, 0xc3}, {&(0x7f0000000000)=""/112, 0x70}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001300)=""/140, 0x8c}, {&(0x7f00000013c0)=""/171, 0xab}], 0x7) 06:34:40 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x101, 0xff, 0x2, 0x7, 0x2, "a2aef65794eae732"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) r3 = eventfd(0x800) fsopen(&(0x7f0000000140)='bpf\x00', 0x1) read$eventfd(r3, &(0x7f0000000080), 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000000)) 06:34:40 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08000000f70304002cbd7000fddbdf900d7e4400030000002e2f66696c65303d2f66696c7a300000"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:bsdpty_device_t:s0\x00', 0xffffffffffffff34) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x5, @remote, 0x4}}, 0x0, 0x0, 0x29, 0x0, "d2c44e5d82ebf2f40b32959d00ed1378d63831917c46861d9eed7e67b7f6a15e9e3aebb62de6a0636a2e4178f2e846c76878859bfa3a4d9ef7e407a7ec4822f40d6af87444501e4c4f4a004a0a03f0b1"}, 0xd8) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) socketpair(0x26, 0x4, 0xfffffffb, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000200)="ffffffc300", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:dbusd_etc_t:s0\x00', 0x21) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x80000001, 0x800) r3 = syz_io_uring_setup(0x1219, &(0x7f0000000180)={0x0, 0xdd91, 0xb8ffe2cb690d5201, 0x2, 0x4001b0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = syz_io_uring_setup(0x164d, &(0x7f0000000280)={0x0, 0x5a50, 0x0, 0x1, 0xc4, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x65b8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c288365", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2505000002080002008208000069c6711249418b87c9667d7132c673f80690c100020000420c3300f2a6dc4a0787729a9bb7911ec46c6467fc87c960f75b7efc59a63b1779a5900be9fdc247f74a9743288d5f2686f83b58"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c051) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) ioctl$TIOCNXCL(r7, 0x540d) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:40 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r3, 0x5460, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000540)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000580)={0x6b4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0xff, 0x6, 0x9}, {0x9, 0x81, 0x6, 0x40}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x3, 0x9, 0xee81}, {0x3, 0xff, 0x9}, {0x800, 0x18, 0x3, 0x2b}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x6b4}}, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 06:34:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ed5, 0x689e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:40 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsmount(r0, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0xe, 0x0, &(0x7f0000000080)=0xfffffffffffffe24) 06:34:40 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x171) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xa17a9) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) 06:34:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ed5, 0x689e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:40 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24) pkey_free(0xffffffffffffffff) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)=0x24) 06:34:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ed5, 0x689e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r1, 0x4000000) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='\'7.\x00', &(0x7f00000000c0)="e14351743e759d593780e1c49e93d1ec3a96facba188cde9a715870b224aa9905066971cd8f5f7f1d6706ed513e398e6190d7136f88ea5e8daaa2749be9e67b29f656f1d33ebf721af777f8c2375fe9dea7758eb6f1173246e28e0df2f1a48adf3a0284c6581e37617402be0d16206374af668c3eeeb45215669e50aa3b4fd5197b14a6109f60d9980e574186f2f852dfdde7ebdbf40f209f3a001f5a45da2daab9baa4c3f446f5ebc4727996f5727d0f3fde4e1c93d215d7e1a6a94bff2875ebb1cd17ebe4b44182417999635e46a8d50e24d3493130bf7e265fff50e24b8c31f921db0", 0xe4) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe71, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0xa5ea903783f1e5b5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r0, r0, r0, r4, r0, r0, r0, r0, r0], 0xa) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000480)='2\x00', &(0x7f00000004c0)="531c51abb5", 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@empty, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000640)) socket$inet6_icmp_raw(0xf, 0x3, 0x3a) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x63, 0x12, 0x7, 0x1, 0x0, 0xdc, 0x11000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x3, @perf_bp={&(0x7f0000000340)}, 0x1710, 0x1f, 0x3, 0xd, 0xfffffffffffffffe, 0x800, 0xefd, 0x0, 0x1, 0x0, 0x1f}, r6, 0xe, r2, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) 06:34:41 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f00000000c0)=0xc) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ed5, 0x689e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) 06:34:41 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="70b6873cca39a423da0a94f6050bcefa", 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7b31f483}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x401c0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='+}\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) set_thread_area(&(0x7f0000000100)={0x1a, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}) r4 = fsopen(&(0x7f0000000180)='sysv\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) r6 = getuid() ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)={0x7f, 0x1000, 0x4, 0x35, 0x1b, "a29956e6cea868035d9af017c2b552103fa06c"}) setuid(r6) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20004, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',loose,fscache,cache=mmap,dfltgid=', @ANYRESHEX, @ANYBLOB=',noextend,dfltuid=', @ANYRESHEX=r6, @ANYBLOB=',version=9p00.L,dfltgid=\x00\x00', @ANYRESHEX=0xee01, @ANYBLOB=',mmap,subj_user=/dev/ttyS3\x00,rootcontext=staff_u,appraise_type=imasig,dont_appraise,\x00']) fsmount(r4, 0x1, 0x80) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x200001) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @remote}, &(0x7f0000000180)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c030000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000f030000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400cf0a000008000100", @ANYRES32=r1, @ANYBLOB="4002028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f3a2000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004003c00000008000600", @ANYRES32=0x0, @ANYBLOB="64285963d115eaf98f3d287c22d98dc8f3c76cbb9063e575486a03ef80be3bdd9cdcc6101520625edebc02b0786bb75b4b5b46113c9550c8773105477201916c8fbeab6f1b8673f53fa1e36c5893c8f9f22565fe42b163f3beaabfecb6c1f90e"], 0x36c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008a, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',mmap,uname=-,)[,access=', @ANYRESDEC, @ANYBLOB="2c61707072616973655f74797065a30970d87369672c646f6e745f686173682c686173682c666f776e65723d", @ANYRESDEC=r2, @ANYBLOB="2c6d61736b3d5e81006769643ca44b98e71452f3bd9fd73713daee7f4975d08f2dc3ccba5bab29b0c10ca615980000000000000000", @ANYRESDEC=0xee00, @ANYBLOB=',dont_measure,pcr=00000000000000000045,euid>', @ANYRESDEC=r3, @ANYBLOB=',obj_type=,\x00']) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0xa, 0x6) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket(0x29, 0x5, 0x4) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="2ffd0505121edcf288c22381257d3d75", 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000100)=""/23, &(0x7f0000000140)=0x17) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000, 0x181100) 06:34:41 executing program 3: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c800000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="80000280400001002400010071756500000000000000000000000000000000000000050003000300000008000400080000000800060000000000000000000000b311eaa4f92665c5c5ef43370749b1bf981ea7990355f41fcad9ae1faa029c15b8f0b38c4bf41c6bb4e1cc3cc8150cc00dd31d582fb3a5dcbcc1e74d9fb5e4c3d301640f8aaad83ebe4f3e96931a5f57c119a7e6de099385394eb374a5dc84853f5108bd0b5c4901b66fe22e015b22aba01c679bf1dbe50a124e4f1023f621b98043185750bd68f9e41782b84319b4c6f3bb4bb077cde90ae60cd71f169c8d8fc8d86cae57bb55f7c32e5c85810bc36382f337a30eb6a8f6e887b78d5b1185fd39738e8b784c4ff84f6806daefb9cac6e02c3543243103f26d4514d2bf3e662060d15e1e3c97a2cd00"/310, @ANYRES32=r0, @ANYRESOCT=r2], 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x16d7fb517ee79168) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) socket$inet(0x2, 0x5, 0x401) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x3, 0x0, &(0x7f00000000c0)=0xfffffffffffffdff) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local}, &(0x7f0000000080)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xb0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4, 0x2, 0x0, 0x1, [{0x0, 0x1, @name={{}, {}, {0x0, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0xffffffffffffff01, 0x1, @activeport={{}, {}, {0x0, 0x4, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x84}, 0x20044800) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:41 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000100)=""/43, &(0x7f0000000140)=0x2b) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x816) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:41 executing program 0: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 1: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socket(0x2a, 0x5, 0xc5) 06:34:41 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:41 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 5: pipe(&(0x7f0000000e00)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:41 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/175, 0xaf}], 0x7) 06:34:41 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 5: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 2: pipe(&(0x7f0000000e00)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 3: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1029, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'cpu.stat\x00'}}], [{@obj_role={'obj_role', 0x3d, '#\a@$'}}, {@audit}]}}) clone3(&(0x7f00000003c0)={0x80000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x2c}, &(0x7f0000000280)=""/109, 0x6d, &(0x7f0000000300)=""/107, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[r4], 0x1) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0xfffffffffffffff8) 06:34:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 2: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 3: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 3: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 1: socket$inet6(0xa, 0x1, 0xffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, 0x0, &(0x7f00000000c0)) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xf, 0x3, 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet(0x2, 0x1, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:42 executing program 4: pipe(&(0x7f0000000e00)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @initdev}, &(0x7f0000000040)=0xc) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet(0x2, 0x1, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc4004, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@access_any}, {@mmap}, {@debug={'debug', 0x3d, 0x8}}, {@noextend}, {@loose}, {@cache_loose}, {@version_L}], [{@dont_hash}, {@subj_user={'subj_user', 0x3d, '\\n-]*)'}}, {@smackfsroot}]}}) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet(0x2, 0x1, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = fsmount(0xffffffffffffffff, 0x1, 0x75) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc6500, 0x0) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) socket$inet(0x2, 0x1, 0x5) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 06:34:42 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:42 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$KDENABIO(r4, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 06:34:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @hci={0x1f, 0x0, 0x2}, @llc={0x1a, 0x8, 0x8, 0x7f, 0x8, 0x8a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfcf, 0x9, 0x8}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf250400000018000180140004000000000000000000000000000000000108000200030000003c0001800500020001000000060001000a00000008000300ffffffff08000300ac1e000108000700", @ANYRES32=r3, @ANYBLOB="0800070032c948d5a4221ea3178f20b421c1523310bc0156ea7a3f04b434cf4ca40d135a61014ce9547c050ecb7dc7", @ANYRES32=0x0, @ANYBLOB="0600010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x48041) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25060000000800030007000000080002000400000008000200010000000800020001000000d7d089843df9b116ca9c9ce1e22a93cbdf6b2b3863d8d19e32e3e526ac8514bf9a7fe768af73acac84fe2aabee5245cc6542ef95a3e1614a26f9c99c83ffa1f43ad9b815182fdee01c26859bb12afc8cddf13a7e82bd280978f544c73fd0beb068b2af2414b8ce77a6181bcadfd30b1db57b472a949555aac7d460a53e493b00"/186], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r8 = syz_open_pts(0xffffffffffffffff, 0x80) r9 = openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000740)={0x0, @loopback, @remote}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="df08000100", @ANYRES32=r3, @ANYBLOB="04000280080001003d5172a89609db8cb35da3d555abb533769acda12ca5fba6a66c3f7c7b274432d65b7a9b171c3556caec72cd1a75cc1129ac8ec4b2da291a0e48e6f0425a2075418cf7e64edc7621ea71d5b0a4b6cf50d54a445e7b5b032b0245e3ec7a83c6c3b733b393210c11bb8e6a20d575866211ab6e5b24ee049276a4160932becde51a678cf2909ca06eaf57644b1e3404f425f854b71d55b4cc0739ef45bbc9b501e01fde4aea493f81f12bd4a72ee1652ac53192ca917fd18f29de8576d265266c782fde4ad364f5e871", @ANYRES32=r3, @ANYBLOB="700002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='$*\v$(\xef$\x00', 0x0, r8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0xfff, 0x8}, @window={0x3, 0x7fff, 0x4}, @sack_perm, @window={0x3, 0x3, 0xe8}], 0x6) 06:34:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2a45b2a98b254b23e5a66e2e486305bd", 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, 0x0, 0x0, 0x3b, 0x0, "4e5a9cf917823a6ca6e0e77af185441e62aa6c25dcb4059e0bae17dd5435b107c542ec577cd73e41415b977fa054f2e42533595face926f73ad72a935b0fa8d7bcb7206bb5f4d596e7be15e50efa787b"}, 0xd8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x36ea, 0xfff}, @sack_perm, @window={0x3, 0x3ff, 0x4f9a}], 0x3) 06:34:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r12 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r12) 06:34:42 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:42 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$inet6_icmp_raw(0x5, 0x3, 0x3a) 06:34:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$KDENABIO(r3, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @hci={0x1f, 0x0, 0x2}, @llc={0x1a, 0x8, 0x8, 0x7f, 0x8, 0x8a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfcf, 0x9, 0x8}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf250400000018000180140004000000000000000000000000000000000108000200030000003c0001800500020001000000060001000a00000008000300ffffffff08000300ac1e000108000700", @ANYRES32=r3, @ANYBLOB="0800070032c948d5a4221ea3178f20b421c1523310bc0156ea7a3f04b434cf4ca40d135a61014ce9547c050ecb7dc7", @ANYRES32=0x0, @ANYBLOB="0600010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x48041) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25060000000800030007000000080002000400000008000200010000000800020001000000d7d089843df9b116ca9c9ce1e22a93cbdf6b2b3863d8d19e32e3e526ac8514bf9a7fe768af73acac84fe2aabee5245cc6542ef95a3e1614a26f9c99c83ffa1f43ad9b815182fdee01c26859bb12afc8cddf13a7e82bd280978f544c73fd0beb068b2af2414b8ce77a6181bcadfd30b1db57b472a949555aac7d460a53e493b00"/186], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r8 = syz_open_pts(0xffffffffffffffff, 0x80) r9 = openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000740)={0x0, @loopback, @remote}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="df08000100", @ANYRES32=r3, @ANYBLOB="04000280080001003d5172a89609db8cb35da3d555abb533769acda12ca5fba6a66c3f7c7b274432d65b7a9b171c3556caec72cd1a75cc1129ac8ec4b2da291a0e48e6f0425a2075418cf7e64edc7621ea71d5b0a4b6cf50d54a445e7b5b032b0245e3ec7a83c6c3b733b393210c11bb8e6a20d575866211ab6e5b24ee049276a4160932becde51a678cf2909ca06eaf57644b1e3404f425f854b71d55b4cc0739ef45bbc9b501e01fde4aea493f81f12bd4a72ee1652ac53192ca917fd18f29de8576d265266c782fde4ad364f5e871", @ANYRES32=r3, @ANYBLOB="700002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='$*\v$(\xef$\x00', 0x0, r8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0xfff, 0x8}, @window={0x3, 0x7fff, 0x4}, @sack_perm, @window={0x3, 0x3, 0xe8}], 0x6) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r12 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r12) 06:34:43 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:34:43 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1189a9) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_open_pts(r1, 0x201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = fspick(r1, &(0x7f0000000140)='./file0\x00', 0x0) fsmount(r3, 0x1, 0xf2) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) syz_open_pts(r0, 0x200401) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000180)=""/249, &(0x7f0000000040)=0xf9) getsockopt$inet_tcp_buf(r5, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$KDENABIO(r3, 0x4b36) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:43 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x4, 0x0, &(0x7f00000000c0)) r12 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r12) 06:34:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0xa196, @local, 0x5}}, 0x0, 0x0, 0x31, 0x0, "c3dec8da75cef6a95633e43b0292d99f88e9503427c54d07b0dbbdd2a465e30538c050f8a5b9b0f3bd274854760fb50e010a5f8ca0acf60f0dc15e7f0b15106d1bd708fbee3ef9658420e2a8d91f4abb"}, 0xd8) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000380)) r7 = socket(0x8, 0x4, 0x8000006) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="23292fe0c3544604e50bdf816771a03bdaf5dfdb88ce165ae11d4e8a97911de14558c1168d930552f2fa2e33d676a63aceff79f1ed8a4138e5886a8082371e6f96d52216c9e61fe61a", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100000000000c0008000100008000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004810) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x8001, 0x0, &(0x7f0000000040)=[r1, r3]}, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r9, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000140)=':\x00', &(0x7f0000000180)='./file0\x00', r9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r2, 0x1) 06:34:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @hci={0x1f, 0x0, 0x2}, @llc={0x1a, 0x8, 0x8, 0x7f, 0x8, 0x8a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfcf, 0x9, 0x8}) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf250400000018000180140004000000000000000000000000000000000108000200030000003c0001800500020001000000060001000a00000008000300ffffffff08000300ac1e000108000700", @ANYRES32=r3, @ANYBLOB="0800070032c948d5a4221ea3178f20b421c1523310bc0156ea7a3f04b434cf4ca40d135a61014ce9547c050ecb7dc7", @ANYRES32=0x0, @ANYBLOB="0600010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x48041) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25060000000800030007000000080002000400000008000200010000000800020001000000d7d089843df9b116ca9c9ce1e22a93cbdf6b2b3863d8d19e32e3e526ac8514bf9a7fe768af73acac84fe2aabee5245cc6542ef95a3e1614a26f9c99c83ffa1f43ad9b815182fdee01c26859bb12afc8cddf13a7e82bd280978f544c73fd0beb068b2af2414b8ce77a6181bcadfd30b1db57b472a949555aac7d460a53e493b00"/186], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r8 = syz_open_pts(0xffffffffffffffff, 0x80) r9 = openat$cgroup_ro(r5, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000740)={0x0, @loopback, @remote}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="df08000100", @ANYRES32=r3, @ANYBLOB="04000280080001003d5172a89609db8cb35da3d555abb533769acda12ca5fba6a66c3f7c7b274432d65b7a9b171c3556caec72cd1a75cc1129ac8ec4b2da291a0e48e6f0425a2075418cf7e64edc7621ea71d5b0a4b6cf50d54a445e7b5b032b0245e3ec7a83c6c3b733b393210c11bb8e6a20d575866211ab6e5b24ee049276a4160932becde51a678cf2909ca06eaf57644b1e3404f425f854b71d55b4cc0739ef45bbc9b501e01fde4aea493f81f12bd4a72ee1652ac53192ca917fd18f29de8576d265266c782fde4ad364f5e871", @ANYRES32=r3, @ANYBLOB="700002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000004000400"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='$*\v$(\xef$\x00', 0x0, r8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0xfff, 0x8}, @window={0x3, 0x7fff, 0x4}, @sack_perm, @window={0x3, 0x3, 0xe8}], 0x6) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x4, 0x0, &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:43 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:43 executing program 4 (fault-call:0 fault-nth:0): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x20, 0x2, 0xff, 0x1, 0x0, 0x7, 0x200, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x14404, 0x2, 0x3, 0x6, 0x1, 0x6, 0xcf, 0x0, 0xffff, 0x0, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) socket$inet_tcp(0x2, 0x1, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 884.637763][T32672] FAULT_INJECTION: forcing a failure. [ 884.637763][T32672] name failslab, interval 1, probability 0, space 0, times 0 [ 884.650945][T32672] CPU: 1 PID: 32672 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 884.659980][T32672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.670320][T32672] Call Trace: [ 884.673649][T32672] dump_stack+0x137/0x19d [ 884.678286][T32672] should_fail+0x23c/0x250 [ 884.682812][T32672] ? getname_flags+0x84/0x3d0 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000940)={0xb5c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x5, 0x48, 0x1}, {0xfff9, 0x5, 0x2, 0x7f}, {0x8, 0xff, 0x1, 0x7c9}, {0x2, 0x3, 0x81}, {0x92, 0xda, 0x7, 0x6}, {0x4, 0x1, 0x1, 0xe3}, {0x81, 0x40, 0x13, 0x10001}, {0x3, 0x7, 0x87, 0x400}, {0x2ea, 0x9, 0x1, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x484, 0x2, 0x4, 0xc7b}, {0x3f, 0x2, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x6, 0x1, 0x1}, {0xfffb, 0x7, 0x0, 0x7}, {0xa0, 0x2, 0x40, 0x5a}, {0x2800, 0x5, 0x3, 0x7f}]}}}]}}, {{0x8, 0x1, r8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf224}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f9a}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x1f, 0x3, 0x2}, {0x4, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x1}, {0x1000, 0x5, 0xfc, 0x1}, {0x6, 0x81, 0x60, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x44890) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:43 executing program 3 (fault-call:0 fault-nth:0): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) [ 884.687753][T32672] __should_failslab+0x81/0x90 [ 884.692584][T32672] should_failslab+0x5/0x20 [ 884.697385][T32672] kmem_cache_alloc+0x46/0x2f0 [ 884.703753][T32672] getname_flags+0x84/0x3d0 [ 884.708273][T32672] getname+0x15/0x20 [ 884.712609][T32672] do_sys_openat2+0x5b/0x250 [ 884.717396][T32672] ? __cond_resched+0x11/0x40 [ 884.723426][T32672] __x64_sys_openat+0xef/0x110 [ 884.728328][T32672] do_syscall_64+0x4a/0x90 06:34:43 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0xb) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\\@\x00', &(0x7f0000000040)='./file0\x00', r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000100)=""/161, &(0x7f0000000080)=0xa1) [ 884.732974][T32672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 884.739032][T32672] RIP: 0033:0x4665d9 [ 884.743158][T32672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.763900][T32672] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.772493][T32672] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 06:34:43 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 884.781207][T32672] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 884.789808][T32672] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.798138][T32672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.806554][T32672] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) pipe(&(0x7f0000000e00)) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:43 executing program 4 (fault-call:0 fault-nth:1): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) [ 884.841794][T32691] FAULT_INJECTION: forcing a failure. [ 884.841794][T32691] name failslab, interval 1, probability 0, space 0, times 0 [ 884.854543][T32691] CPU: 0 PID: 32691 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 884.863315][T32691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.873723][T32691] Call Trace: [ 884.877150][T32691] dump_stack+0x137/0x19d [ 884.881592][T32691] should_fail+0x23c/0x250 [ 884.886012][T32691] ? getname_flags+0x84/0x3d0 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 884.890799][T32691] __should_failslab+0x81/0x90 [ 884.895791][T32691] should_failslab+0x5/0x20 [ 884.900641][T32691] kmem_cache_alloc+0x46/0x2f0 [ 884.905694][T32691] getname_flags+0x84/0x3d0 [ 884.910744][T32691] getname+0x15/0x20 [ 884.914733][T32691] do_sys_openat2+0x5b/0x250 [ 884.919340][T32691] ? __cond_resched+0x11/0x40 [ 884.924331][T32691] __x64_sys_openat+0xef/0x110 [ 884.929327][T32691] do_syscall_64+0x4a/0x90 [ 884.933870][T32691] entry_SYSCALL_64_after_hwframe+0x44/0xae 06:34:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 884.940262][T32691] RIP: 0033:0x4665d9 [ 884.944265][T32691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.964450][T32691] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.972874][T32691] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 884.981032][T32691] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @private, @local}, &(0x7f00000007c0)=0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 884.989185][T32691] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.997526][T32691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.006166][T32691] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 885.021736][T32706] FAULT_INJECTION: forcing a failure. [ 885.021736][T32706] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 885.035506][T32706] CPU: 0 PID: 32706 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 885.044533][T32706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.055226][T32706] Call Trace: [ 885.059045][T32706] dump_stack+0x137/0x19d [ 885.064071][T32706] should_fail+0x23c/0x250 [ 885.068918][T32706] should_fail_usercopy+0x16/0x20 [ 885.074223][T32706] strncpy_from_user+0x21/0x250 [ 885.079270][T32706] getname_flags+0xb8/0x3d0 [ 885.083896][T32706] getname+0x15/0x20 [ 885.087981][T32706] do_sys_openat2+0x5b/0x250 06:34:43 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 885.093209][T32706] ? __cond_resched+0x11/0x40 [ 885.097986][T32706] __x64_sys_openat+0xef/0x110 [ 885.102763][T32706] do_syscall_64+0x4a/0x90 [ 885.107362][T32706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 885.113502][T32706] RIP: 0033:0x4665d9 [ 885.117582][T32706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.138388][T32706] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.147317][T32706] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 885.155470][T32706] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 885.164063][T32706] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.172297][T32706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.180333][T32706] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:43 executing program 3 (fault-call:0 fault-nth:1): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @multicast2}, &(0x7f00000006c0)=0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:43 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:43 executing program 4 (fault-call:0 fault-nth:2): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:43 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) [ 885.261319][T32750] FAULT_INJECTION: forcing a failure. [ 885.261319][T32750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.274659][T32750] CPU: 1 PID: 32750 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 885.283781][T32750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.286104][T32755] FAULT_INJECTION: forcing a failure. [ 885.286104][T32755] name failslab, interval 1, probability 0, space 0, times 0 [ 885.294056][T32750] Call Trace: [ 885.294068][T32750] dump_stack+0x137/0x19d [ 885.315339][T32750] should_fail+0x23c/0x250 [ 885.320207][T32750] should_fail_usercopy+0x16/0x20 [ 885.325233][T32750] strncpy_from_user+0x21/0x250 [ 885.330082][T32750] getname_flags+0xb8/0x3d0 [ 885.334574][T32750] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 885.340137][T32750] getname+0x15/0x20 [ 885.344046][T32750] do_sys_openat2+0x5b/0x250 [ 885.348634][T32750] ? __cond_resched+0x11/0x40 [ 885.353388][T32750] __x64_sys_openat+0xef/0x110 [ 885.358491][T32750] do_syscall_64+0x4a/0x90 [ 885.363034][T32750] ? irqentry_exit_to_user_mode+0x5/0x20 [ 885.368913][T32750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 885.375173][T32750] RIP: 0033:0x4665d9 [ 885.379051][T32750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.400944][T32750] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 06:34:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) pipe(&(0x7f0000000e00)) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 885.409606][T32750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 885.417752][T32750] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 885.426241][T32750] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.434244][T32750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.442196][T32750] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 885.450559][T32755] CPU: 0 PID: 32755 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 06:34:44 executing program 3 (fault-call:0 fault-nth:2): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) [ 885.459749][T32755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.470147][T32755] Call Trace: [ 885.474602][T32755] dump_stack+0x137/0x19d [ 885.478937][T32755] should_fail+0x23c/0x250 [ 885.483897][T32755] ? __alloc_file+0x2e/0x1a0 [ 885.488931][T32755] __should_failslab+0x81/0x90 [ 885.494020][T32755] should_failslab+0x5/0x20 [ 885.498880][T32755] kmem_cache_alloc+0x46/0x2f0 [ 885.504003][T32755] __alloc_file+0x2e/0x1a0 06:34:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x6, 0x4, 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) [ 885.508654][T32755] alloc_empty_file+0xcd/0x1c0 [ 885.513506][T32755] path_openat+0x6a/0x20b0 [ 885.518278][T32755] ? try_charge+0x36/0x9c0 [ 885.523047][T32755] ? cgroup_rstat_updated+0x60/0x1c0 [ 885.528429][T32755] ? __mod_memcg_lruvec_state+0xaa/0x190 [ 885.534176][T32755] ? kstrtoull+0x30e/0x350 [ 885.540169][T32755] do_filp_open+0xd9/0x1f0 [ 885.544605][T32755] ? __virt_addr_valid+0x15a/0x1a0 [ 885.549993][T32755] ? __check_object_size+0x253/0x310 [ 885.555391][T32755] ? _find_next_bit+0x16a/0x190 06:34:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in=@local}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 885.560441][T32755] ? alloc_fd+0x388/0x3e0 [ 885.564850][T32755] do_sys_openat2+0xa3/0x250 [ 885.569889][T32755] ? __cond_resched+0x11/0x40 [ 885.574833][T32755] __x64_sys_openat+0xef/0x110 [ 885.579618][T32755] do_syscall_64+0x4a/0x90 [ 885.584049][T32755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 885.590056][T32755] RIP: 0033:0x4665d9 [ 885.594124][T32755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.596512][ T300] FAULT_INJECTION: forcing a failure. [ 885.596512][ T300] name failslab, interval 1, probability 0, space 0, times 0 [ 885.614785][T32755] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.614810][T32755] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 885.614821][T32755] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 885.614832][T32755] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.660904][T32755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.669059][T32755] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 885.677462][ T300] CPU: 1 PID: 300 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 885.686142][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.696196][ T300] Call Trace: [ 885.699520][ T300] dump_stack+0x137/0x19d [ 885.703858][ T300] should_fail+0x23c/0x250 [ 885.708296][ T300] ? __alloc_file+0x2e/0x1a0 [ 885.712895][ T300] __should_failslab+0x81/0x90 [ 885.717778][ T300] should_failslab+0x5/0x20 [ 885.722463][ T300] kmem_cache_alloc+0x46/0x2f0 [ 885.727505][ T300] __alloc_file+0x2e/0x1a0 [ 885.732130][ T300] alloc_empty_file+0xcd/0x1c0 [ 885.736994][ T300] path_openat+0x6a/0x20b0 [ 885.741472][ T300] ? try_charge+0x36/0x9c0 [ 885.746244][ T300] ? cgroup_rstat_updated+0x60/0x1c0 [ 885.751625][ T300] ? __mod_memcg_lruvec_state+0xaa/0x190 [ 885.757351][ T300] ? kstrtoull+0x30e/0x350 06:34:44 executing program 4 (fault-call:0 fault-nth:3): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:44 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 885.761784][ T300] do_filp_open+0xd9/0x1f0 [ 885.766305][ T300] ? __virt_addr_valid+0x15a/0x1a0 [ 885.771527][ T300] ? __check_object_size+0x253/0x310 [ 885.777267][ T300] ? _find_next_bit+0x16a/0x190 [ 885.782324][ T300] ? alloc_fd+0x388/0x3e0 [ 885.786829][ T300] do_sys_openat2+0xa3/0x250 [ 885.791452][ T300] ? __cond_resched+0x11/0x40 [ 885.796392][ T300] __x64_sys_openat+0xef/0x110 [ 885.801359][ T300] do_syscall_64+0x4a/0x90 [ 885.805855][ T300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 885.812426][ T300] RIP: 0033:0x4665d9 [ 885.814429][ T319] FAULT_INJECTION: forcing a failure. [ 885.814429][ T319] name failslab, interval 1, probability 0, space 0, times 0 [ 885.816340][ T300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.816360][ T300] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.816378][ T300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 885.816388][ T300] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 885.816398][ T300] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.883454][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.891672][ T300] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 885.899839][ T319] CPU: 0 PID: 319 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 885.909479][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.920568][ T319] Call Trace: [ 885.924382][ T319] dump_stack+0x137/0x19d [ 885.928865][ T319] should_fail+0x23c/0x250 [ 885.933383][ T319] ? security_file_alloc+0x30/0x190 [ 885.938679][ T319] __should_failslab+0x81/0x90 [ 885.943625][ T319] should_failslab+0x5/0x20 [ 885.948790][ T319] kmem_cache_alloc+0x46/0x2f0 [ 885.954446][ T319] security_file_alloc+0x30/0x190 06:34:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0xdfca) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:44 executing program 3 (fault-call:0 fault-nth:3): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) socketpair(0x2, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000580)='cubic\x00', 0x6) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x16, 0x1d, 0x192, &(0x7f0000000100)}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x9, 0x3, 0x80, 0x0, 0xfffffffffffffff9, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x800, 0x7f}, 0x400, 0x8001, 0x200, 0x0, 0x1, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x2, r2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="876f0507d7efd95695e7ebca4783ef14", 0x10) [ 885.959880][ T319] __alloc_file+0x83/0x1a0 [ 885.964511][ T319] alloc_empty_file+0xcd/0x1c0 [ 885.969547][ T319] path_openat+0x6a/0x20b0 [ 885.974183][ T319] ? try_charge+0x36/0x9c0 [ 885.978624][ T319] ? cgroup_rstat_updated+0x60/0x1c0 [ 885.984269][ T319] ? __mod_memcg_lruvec_state+0xaa/0x190 [ 885.990597][ T319] ? kstrtoull+0x30e/0x350 [ 885.995354][ T319] do_filp_open+0xd9/0x1f0 [ 885.999859][ T319] ? __virt_addr_valid+0x15a/0x1a0 [ 886.005262][ T319] ? __check_object_size+0x253/0x310 06:34:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 886.011043][ T319] ? _find_next_bit+0x16a/0x190 [ 886.016005][ T319] ? alloc_fd+0x388/0x3e0 [ 886.020638][ T319] do_sys_openat2+0xa3/0x250 [ 886.025321][ T319] ? __cond_resched+0x11/0x40 [ 886.030007][ T319] __x64_sys_openat+0xef/0x110 [ 886.035504][ T319] do_syscall_64+0x4a/0x90 [ 886.040020][ T319] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.046028][ T319] RIP: 0033:0x4665d9 [ 886.049929][ T319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.069897][ T319] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.079047][ T319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 886.082827][ T337] FAULT_INJECTION: forcing a failure. [ 886.082827][ T337] name failslab, interval 1, probability 0, space 0, times 0 [ 886.087471][ T319] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 886.087488][ T319] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.087501][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.087512][ T319] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 886.134101][ T337] CPU: 1 PID: 337 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 886.142963][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.153373][ T337] Call Trace: [ 886.156674][ T337] dump_stack+0x137/0x19d [ 886.161098][ T337] should_fail+0x23c/0x250 [ 886.165561][ T337] ? security_file_alloc+0x30/0x190 [ 886.170852][ T337] __should_failslab+0x81/0x90 [ 886.175848][ T337] should_failslab+0x5/0x20 [ 886.180434][ T337] kmem_cache_alloc+0x46/0x2f0 [ 886.185219][ T337] security_file_alloc+0x30/0x190 [ 886.191036][ T337] __alloc_file+0x83/0x1a0 [ 886.195629][ T337] alloc_empty_file+0xcd/0x1c0 [ 886.200609][ T337] path_openat+0x6a/0x20b0 [ 886.205108][ T337] ? try_charge+0x36/0x9c0 06:34:44 executing program 4 (fault-call:0 fault-nth:4): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000180)=0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f00000000c0)) [ 886.209910][ T337] ? cgroup_rstat_updated+0x60/0x1c0 [ 886.215684][ T337] ? __mod_memcg_lruvec_state+0xaa/0x190 [ 886.221469][ T337] ? kstrtoull+0x30e/0x350 [ 886.225955][ T337] do_filp_open+0xd9/0x1f0 [ 886.230622][ T337] ? __virt_addr_valid+0x15a/0x1a0 [ 886.236118][ T337] ? __check_object_size+0x253/0x310 [ 886.241700][ T337] ? _find_next_bit+0x16a/0x190 [ 886.246868][ T337] ? alloc_fd+0x388/0x3e0 [ 886.251738][ T337] do_sys_openat2+0xa3/0x250 [ 886.256645][ T337] ? __cond_resched+0x11/0x40 06:34:44 executing program 1: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xafac2) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x22) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000100)='nomand\x00', 0x0, 0x0) socketpair(0xa804c06163798f25, 0x800, 0x80, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0xfffffffffffffffe, 0x0, r4) syz_open_dev$usbmon(&(0x7f0000000040), 0x86, 0x100) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) fsmount(0xffffffffffffffff, 0x1, 0x8) [ 886.261717][ T337] __x64_sys_openat+0xef/0x110 [ 886.266497][ T337] do_syscall_64+0x4a/0x90 [ 886.271111][ T337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.277015][ T337] RIP: 0033:0x4665d9 [ 886.281261][ T337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.301659][ T337] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 06:34:44 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 886.310464][ T337] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 886.319317][ T337] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 886.328351][ T337] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.336796][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.345209][ T337] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 06:34:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 886.370761][ T360] FAULT_INJECTION: forcing a failure. [ 886.370761][ T360] name failslab, interval 1, probability 0, space 0, times 0 [ 886.384288][ T360] CPU: 1 PID: 360 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 886.393875][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.404231][ T360] Call Trace: [ 886.407609][ T360] dump_stack+0x137/0x19d [ 886.412435][ T360] should_fail+0x23c/0x250 06:34:45 executing program 3 (fault-call:0 fault-nth:4): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) [ 886.417367][ T360] __should_failslab+0x81/0x90 [ 886.422249][ T360] ? tty_open+0x7c/0xb60 [ 886.426961][ T360] should_failslab+0x5/0x20 [ 886.431603][ T360] kmem_cache_alloc_trace+0x49/0x310 [ 886.437052][ T360] tty_open+0x7c/0xb60 [ 886.441955][ T360] chrdev_open+0x39c/0x420 [ 886.446337][ T376] FAULT_INJECTION: forcing a failure. [ 886.446337][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 886.446656][ T360] ? cd_forget+0x100/0x100 [ 886.464627][ T360] do_dentry_open+0x53e/0x830 [ 886.469598][ T360] vfs_open+0x43/0x50 [ 886.473672][ T360] path_openat+0x184e/0x20b0 [ 886.478388][ T360] ? cgroup_rstat_updated+0x60/0x1c0 [ 886.483920][ T360] do_filp_open+0xd9/0x1f0 [ 886.488442][ T360] ? alloc_fd+0x388/0x3e0 [ 886.493127][ T360] do_sys_openat2+0xa3/0x250 [ 886.498203][ T360] ? __cond_resched+0x11/0x40 [ 886.503312][ T360] __x64_sys_openat+0xef/0x110 [ 886.508182][ T360] do_syscall_64+0x4a/0x90 [ 886.512785][ T360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.519250][ T360] RIP: 0033:0x4665d9 [ 886.523131][ T360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.543646][ T360] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.552652][ T360] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 886.561477][ T360] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 886.570333][ T360] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.580433][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.589358][ T360] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 886.597848][ T376] CPU: 0 PID: 376 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 886.607163][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.617332][ T376] Call Trace: 06:34:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:45 executing program 4 (fault-call:0 fault-nth:5): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 886.620839][ T376] dump_stack+0x137/0x19d [ 886.625312][ T376] should_fail+0x23c/0x250 [ 886.629997][ T376] __should_failslab+0x81/0x90 [ 886.634865][ T376] ? tty_open+0x7c/0xb60 [ 886.639375][ T376] should_failslab+0x5/0x20 [ 886.644210][ T376] kmem_cache_alloc_trace+0x49/0x310 [ 886.649896][ T376] tty_open+0x7c/0xb60 [ 886.654083][ T376] chrdev_open+0x39c/0x420 [ 886.658692][ T376] ? cd_forget+0x100/0x100 [ 886.663304][ T376] do_dentry_open+0x53e/0x830 [ 886.668278][ T376] vfs_open+0x43/0x50 06:34:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 886.672531][ T376] path_openat+0x184e/0x20b0 [ 886.677124][ T376] ? cgroup_rstat_updated+0x60/0x1c0 [ 886.682613][ T376] do_filp_open+0xd9/0x1f0 [ 886.687234][ T376] ? alloc_fd+0x388/0x3e0 [ 886.691576][ T376] do_sys_openat2+0xa3/0x250 [ 886.696308][ T376] ? __cond_resched+0x11/0x40 [ 886.701079][ T376] __x64_sys_openat+0xef/0x110 [ 886.706123][ T376] do_syscall_64+0x4a/0x90 [ 886.710844][ T376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.716913][ T376] RIP: 0033:0x4665d9 06:34:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 886.720952][ T376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.740741][ T376] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.749341][ T376] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 886.757794][ T376] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c 06:34:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0xa, 0xdfca) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 886.766002][ T376] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.774769][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.783603][ T376] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 886.789953][ T392] FAULT_INJECTION: forcing a failure. [ 886.789953][ T392] name failslab, interval 1, probability 0, space 0, times 0 [ 886.805026][ T392] CPU: 1 PID: 392 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 886.815591][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.826346][ T392] Call Trace: [ 886.829641][ T392] dump_stack+0x137/0x19d [ 886.834284][ T392] should_fail+0x23c/0x250 [ 886.838791][ T392] __should_failslab+0x81/0x90 [ 886.843572][ T392] ? alloc_tty_struct+0x49/0x420 [ 886.848570][ T392] should_failslab+0x5/0x20 [ 886.853170][ T392] kmem_cache_alloc_trace+0x49/0x310 [ 886.858633][ T392] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 886.865033][ T392] alloc_tty_struct+0x49/0x420 06:34:45 executing program 3 (fault-call:0 fault-nth:5): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 06:34:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) setuid(0xee01) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 886.869998][ T392] tty_init_dev+0x39/0x340 [ 886.874831][ T392] tty_open+0x70c/0xb60 [ 886.879589][ T392] chrdev_open+0x39c/0x420 [ 886.884472][ T392] ? cd_forget+0x100/0x100 [ 886.888925][ T392] do_dentry_open+0x53e/0x830 [ 886.893816][ T392] vfs_open+0x43/0x50 [ 886.897814][ T392] path_openat+0x184e/0x20b0 [ 886.902420][ T392] ? cgroup_rstat_updated+0x60/0x1c0 [ 886.908154][ T392] do_filp_open+0xd9/0x1f0 [ 886.912575][ T392] ? alloc_fd+0x388/0x3e0 [ 886.917015][ T392] do_sys_openat2+0xa3/0x250 06:34:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 886.921609][ T392] ? __cond_resched+0x11/0x40 [ 886.926563][ T392] __x64_sys_openat+0xef/0x110 [ 886.931464][ T392] do_syscall_64+0x4a/0x90 [ 886.936068][ T392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.942160][ T392] RIP: 0033:0x4665d9 [ 886.946176][ T392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:34:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x3}) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 886.965963][ T392] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.974762][ T392] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 886.983305][ T392] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 886.991733][ T392] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.999940][ T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.008346][ T392] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 887.026927][ T410] FAULT_INJECTION: forcing a failure. [ 887.026927][ T410] name failslab, interval 1, probability 0, space 0, times 0 [ 887.040002][ T410] CPU: 0 PID: 410 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 887.048686][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.059353][ T410] Call Trace: [ 887.062963][ T410] dump_stack+0x137/0x19d [ 887.067743][ T410] should_fail+0x23c/0x250 [ 887.072967][ T410] __should_failslab+0x81/0x90 [ 887.077768][ T410] ? alloc_tty_struct+0x49/0x420 [ 887.082810][ T410] should_failslab+0x5/0x20 [ 887.087428][ T410] kmem_cache_alloc_trace+0x49/0x310 [ 887.092939][ T410] alloc_tty_struct+0x49/0x420 [ 887.098173][ T410] tty_init_dev+0x39/0x340 [ 887.103078][ T410] tty_open+0x70c/0xb60 [ 887.107357][ T410] chrdev_open+0x39c/0x420 [ 887.111907][ T410] ? cd_forget+0x100/0x100 [ 887.116751][ T410] do_dentry_open+0x53e/0x830 [ 887.121557][ T410] vfs_open+0x43/0x50 06:34:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8080) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7ff, 0x598, 0xf80, 0x7, 0xd, "b29dfbf1f7c47527900dfba43dec000af32387"}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) 06:34:45 executing program 4 (fault-call:0 fault-nth:6): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:45 executing program 0: r0 = socket$inet(0x2, 0xa, 0xdfca) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:45 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 887.125813][ T410] path_openat+0x184e/0x20b0 [ 887.130502][ T410] ? cgroup_rstat_updated+0x60/0x1c0 [ 887.136035][ T410] do_filp_open+0xd9/0x1f0 [ 887.140654][ T410] ? alloc_fd+0x388/0x3e0 [ 887.144997][ T410] do_sys_openat2+0xa3/0x250 [ 887.149917][ T410] ? __cond_resched+0x11/0x40 [ 887.154601][ T410] __x64_sys_openat+0xef/0x110 [ 887.159374][ T410] do_syscall_64+0x4a/0x90 [ 887.164084][ T410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 887.170081][ T410] RIP: 0033:0x4665d9 06:34:45 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 887.174060][ T410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.194562][ T410] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 887.203060][ T410] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 887.211320][ T410] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 887.219756][ T410] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.228253][ T410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.236493][ T410] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 887.244641][ T445] FAULT_INJECTION: forcing a failure. [ 887.244641][ T445] name failslab, interval 1, probability 0, space 0, times 0 [ 887.257609][ T445] CPU: 1 PID: 445 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 887.266572][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.276987][ T445] Call Trace: [ 887.280271][ T445] dump_stack+0x137/0x19d [ 887.285114][ T445] should_fail+0x23c/0x250 [ 887.289569][ T445] __should_failslab+0x81/0x90 [ 887.294354][ T445] should_failslab+0x5/0x20 [ 887.299173][ T445] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 887.305076][ T445] ? __get_vm_area_node+0x11b/0x260 [ 887.310374][ T445] ? kcsan_setup_watchpoint+0x26e/0x470 [ 887.316155][ T445] __get_vm_area_node+0x11b/0x260 [ 887.321246][ T445] __vmalloc_node_range+0xc2/0x5b0 [ 887.326488][ T445] ? n_tty_open+0x17/0xe0 [ 887.330831][ T445] ? klist_class_dev_get+0x20/0x20 [ 887.335971][ T445] ? klist_iter_exit+0xad/0xd0 [ 887.340838][ T445] ? n_tty_open+0x17/0xe0 [ 887.345240][ T445] vzalloc+0x5a/0x70 [ 887.349142][ T445] ? n_tty_open+0x17/0xe0 [ 887.353482][ T445] n_tty_open+0x17/0xe0 [ 887.357864][ T445] tty_ldisc_setup+0x77/0x200 [ 887.362633][ T445] tty_init_dev+0x18e/0x340 [ 887.367344][ T445] tty_open+0x70c/0xb60 [ 887.371684][ T445] chrdev_open+0x39c/0x420 06:34:45 executing program 3 (fault-call:0 fault-nth:6): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:45 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:45 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:45 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:45 executing program 1: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCCBRK(r1, 0x5428) r3 = syz_open_pts(r1, 0x10000) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000100)={0x2, 0xfff, 0x90, 0xfffffff7, 0x4, "660d15118a4a5b73cae64a3655e0b76373cfa2", 0x0, 0x1}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x2, 0xdc, 0x2, 0x80, 0x10, "299a5a041aa0ba95384c09fce2c9498b52a35a"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:45 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 887.376144][ T445] ? cd_forget+0x100/0x100 [ 887.380655][ T445] do_dentry_open+0x53e/0x830 [ 887.387519][ T445] vfs_open+0x43/0x50 [ 887.391993][ T445] path_openat+0x184e/0x20b0 [ 887.396984][ T445] ? cgroup_rstat_updated+0x60/0x1c0 [ 887.402393][ T445] do_filp_open+0xd9/0x1f0 [ 887.407083][ T445] ? alloc_fd+0x388/0x3e0 [ 887.412945][ T445] do_sys_openat2+0xa3/0x250 [ 887.417640][ T445] ? __schedule+0x427/0x5b0 [ 887.422430][ T445] __x64_sys_openat+0xef/0x110 06:34:46 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 887.427219][ T445] do_syscall_64+0x4a/0x90 [ 887.431796][ T445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 887.437870][ T445] RIP: 0033:0x4665d9 [ 887.441855][ T445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.461489][ T445] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 887.470232][ T445] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 887.478294][ T445] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 887.486523][ T445] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.494940][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.503176][ T445] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 887.511516][ T445] syz-executor.4: vmalloc size 8896 allocation failure: vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 887.528484][ T445] CPU: 1 PID: 445 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 887.537355][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.547669][ T445] Call Trace: [ 887.551219][ T445] dump_stack+0x137/0x19d [ 887.555717][ T445] warn_alloc+0x105/0x160 [ 887.560171][ T445] __vmalloc_node_range+0x222/0x5b0 [ 887.565366][ T445] ? klist_class_dev_get+0x20/0x20 [ 887.570936][ T445] ? klist_iter_exit+0xad/0xd0 [ 887.575782][ T445] ? n_tty_open+0x17/0xe0 [ 887.580947][ T445] vzalloc+0x5a/0x70 [ 887.585605][ T445] ? n_tty_open+0x17/0xe0 [ 887.590372][ T445] n_tty_open+0x17/0xe0 [ 887.595166][ T445] tty_ldisc_setup+0x77/0x200 [ 887.600630][ T445] tty_init_dev+0x18e/0x340 [ 887.605336][ T445] tty_open+0x70c/0xb60 [ 887.609505][ T445] chrdev_open+0x39c/0x420 [ 887.614088][ T445] ? cd_forget+0x100/0x100 [ 887.618965][ T445] do_dentry_open+0x53e/0x830 [ 887.624429][ T445] vfs_open+0x43/0x50 [ 887.628548][ T445] path_openat+0x184e/0x20b0 [ 887.633592][ T445] ? cgroup_rstat_updated+0x60/0x1c0 [ 887.638873][ T445] do_filp_open+0xd9/0x1f0 [ 887.643674][ T445] ? alloc_fd+0x388/0x3e0 [ 887.648125][ T445] do_sys_openat2+0xa3/0x250 [ 887.653219][ T445] ? __schedule+0x427/0x5b0 [ 887.657799][ T445] __x64_sys_openat+0xef/0x110 [ 887.662770][ T445] do_syscall_64+0x4a/0x90 [ 887.667492][ T445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 887.674103][ T445] RIP: 0033:0x4665d9 [ 887.678079][ T445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.698731][ T445] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 887.707826][ T445] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 887.716508][ T445] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 887.726083][ T445] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.734292][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.742621][ T445] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 887.751002][ T445] Mem-Info: [ 887.754161][ T445] active_anon:68 inactive_anon:33449 isolated_anon:0 [ 887.754161][ T445] active_file:6202 inactive_file:29678 isolated_file:0 [ 887.754161][ T445] unevictable:0 dirty:274 writeback:0 [ 887.754161][ T445] slab_reclaimable:6901 slab_unreclaimable:22091 [ 887.754161][ T445] mapped:61111 shmem:2642 pagetables:27707 bounce:0 [ 887.754161][ T445] free:1823392 free_pcp:985 free_cma:0 [ 887.792356][ T445] Node 0 active_anon:272kB inactive_anon:133796kB active_file:24808kB inactive_file:118712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244444kB dirty:1096kB writeback:0kB shmem:10568kB writeback_tmp:0kB kernel_stack:17616kB pagetables:110828kB all_unreclaimable? no [ 887.820376][ T445] Node 0 DMA free:15908kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.847773][ T445] lowmem_reserve[]: 0 2938 7916 7916 [ 887.853994][ T445] Node 0 DMA32 free:3012000kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3013532kB mlocked:0kB bounce:0kB free_pcp:1532kB local_pcp:1480kB free_cma:0kB [ 887.884752][ T445] lowmem_reserve[]: 0 0 4978 4978 [ 887.890032][ T445] Node 0 Normal free:4265660kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:272kB inactive_anon:133796kB active_file:24808kB inactive_file:118712kB unevictable:0kB writepending:1096kB present:5242880kB managed:5098252kB mlocked:0kB bounce:0kB free_pcp:2376kB local_pcp:1168kB free_cma:0kB [ 887.921853][ T445] lowmem_reserve[]: 0 0 0 0 [ 887.926453][ T445] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 887.941394][ T445] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 5*64kB (M) 5*128kB (M) 5*256kB (M) 6*512kB (M) 2*1024kB (M) 1*2048kB (M) 733*4096kB (M) = 3012000kB [ 887.957952][ T445] Node 0 Normal: 42*4kB (UM) 73*8kB (UME) 150*16kB (UME) 180*32kB (UME) 610*64kB (UME) 165*128kB (UME) 41*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1020*4096kB (UM) = 4265680kB [ 887.977530][ T445] Node 0 hugepages_total=8 hugepages_free=8 hugepages_surp=4 hugepages_size=2048kB [ 887.987747][ T445] 18850 total pagecache pages [ 887.993112][ T445] 0 pages in swap cache [ 887.997256][ T445] Swap cache stats: add 0, delete 0, find 0/0 [ 888.003894][ T445] Free swap = 0kB [ 888.007859][ T445] Total swap = 0kB [ 888.011876][ T445] 2097051 pages RAM [ 888.016538][ T445] 0 pages HighMem/MovableOnly [ 888.021494][ T445] 65128 pages reserved 06:34:46 executing program 4 (fault-call:0 fault-nth:7): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:46 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:46 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:34:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0xdfca) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 888.025816][ T445] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 888.035754][ T455] FAULT_INJECTION: forcing a failure. [ 888.035754][ T455] name failslab, interval 1, probability 0, space 0, times 0 [ 888.050011][ T455] CPU: 1 PID: 455 Comm: syz-executor.3 Not tainted 5.13.0-rc1-syzkaller #0 [ 888.059062][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.069590][ T455] Call Trace: [ 888.072872][ T455] dump_stack+0x137/0x19d [ 888.077214][ T455] should_fail+0x23c/0x250 06:34:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0xdfca) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 888.081855][ T455] __should_failslab+0x81/0x90 [ 888.086769][ T455] should_failslab+0x5/0x20 [ 888.091774][ T455] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 888.097607][ T455] ? __get_vm_area_node+0x11b/0x260 [ 888.103273][ T455] __get_vm_area_node+0x11b/0x260 [ 888.108535][ T455] ? vsnprintf+0xe8f/0xed0 [ 888.113082][ T455] __vmalloc_node_range+0xc2/0x5b0 [ 888.118541][ T455] ? n_tty_open+0x17/0xe0 [ 888.123070][ T455] ? klist_class_dev_get+0x20/0x20 [ 888.128332][ T455] ? klist_iter_exit+0xad/0xd0 [ 888.133225][ T455] ? n_tty_open+0x17/0xe0 [ 888.137747][ T455] vzalloc+0x5a/0x70 [ 888.141747][ T455] ? n_tty_open+0x17/0xe0 [ 888.146259][ T455] n_tty_open+0x17/0xe0 [ 888.151022][ T455] tty_ldisc_setup+0x77/0x200 [ 888.155792][ T455] tty_init_dev+0x18e/0x340 [ 888.160549][ T455] tty_open+0x70c/0xb60 [ 888.164837][ T455] chrdev_open+0x39c/0x420 [ 888.169503][ T455] ? cd_forget+0x100/0x100 [ 888.173999][ T455] do_dentry_open+0x53e/0x830 [ 888.178899][ T455] vfs_open+0x43/0x50 [ 888.182916][ T455] path_openat+0x184e/0x20b0 [ 888.187491][ T455] ? cgroup_rstat_updated+0x60/0x1c0 [ 888.193200][ T455] do_filp_open+0xd9/0x1f0 [ 888.197954][ T455] ? alloc_fd+0x388/0x3e0 [ 888.202367][ T455] do_sys_openat2+0xa3/0x250 [ 888.206956][ T455] ? __cond_resched+0x11/0x40 [ 888.211619][ T455] __x64_sys_openat+0xef/0x110 [ 888.216533][ T455] do_syscall_64+0x4a/0x90 [ 888.221247][ T455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.227394][ T455] RIP: 0033:0x4665d9 [ 888.231919][ T455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.252604][ T455] RSP: 002b:00007f891c917188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.261625][ T455] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 888.269758][ T455] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 888.277802][ T455] RBP: 00007f891c9171d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.286075][ T455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.294057][ T455] R13: 00007fff6942aa5f R14: 00007f891c917300 R15: 0000000000022000 [ 888.302817][ T455] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 06:34:46 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:46 executing program 0: r0 = socket$inet(0x2, 0x0, 0xdfca) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:46 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:46 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 888.331265][ T489] FAULT_INJECTION: forcing a failure. [ 888.331265][ T489] name failslab, interval 1, probability 0, space 0, times 0 [ 888.344464][ T489] CPU: 0 PID: 489 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 888.353233][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.363986][ T489] Call Trace: [ 888.367385][ T489] dump_stack+0x137/0x19d [ 888.371816][ T489] should_fail+0x23c/0x250 [ 888.376385][ T489] __should_failslab+0x81/0x90 [ 888.381327][ T489] should_failslab+0x5/0x20 [ 888.387039][ T489] kmem_cache_alloc_node+0x58/0x2b0 [ 888.393116][ T489] ? alloc_vmap_area+0x12f/0x1340 [ 888.398605][ T489] alloc_vmap_area+0x12f/0x1340 [ 888.403486][ T489] ? kmem_cache_alloc_node_trace+0x1f6/0x2e0 [ 888.409660][ T489] __get_vm_area_node+0x165/0x260 [ 888.415632][ T489] ? vsnprintf+0xe8f/0xed0 [ 888.420096][ T489] __vmalloc_node_range+0xc2/0x5b0 [ 888.425629][ T489] ? n_tty_open+0x17/0xe0 [ 888.429971][ T489] ? klist_class_dev_get+0x20/0x20 [ 888.435095][ T489] ? klist_iter_exit+0xad/0xd0 [ 888.440258][ T489] ? n_tty_open+0x17/0xe0 [ 888.444802][ T489] vzalloc+0x5a/0x70 [ 888.449328][ T489] ? n_tty_open+0x17/0xe0 [ 888.453965][ T489] n_tty_open+0x17/0xe0 [ 888.458160][ T489] tty_ldisc_setup+0x77/0x200 [ 888.463212][ T489] tty_init_dev+0x18e/0x340 [ 888.468148][ T489] tty_open+0x70c/0xb60 [ 888.472453][ T489] chrdev_open+0x39c/0x420 [ 888.477143][ T489] ? cd_forget+0x100/0x100 [ 888.481560][ T489] do_dentry_open+0x53e/0x830 [ 888.486422][ T489] vfs_open+0x43/0x50 [ 888.490675][ T489] path_openat+0x184e/0x20b0 [ 888.495967][ T489] ? cgroup_rstat_updated+0x60/0x1c0 [ 888.501604][ T489] do_filp_open+0xd9/0x1f0 [ 888.506582][ T489] ? alloc_fd+0x388/0x3e0 [ 888.511982][ T489] do_sys_openat2+0xa3/0x250 [ 888.516575][ T489] ? __cond_resched+0x11/0x40 [ 888.521817][ T489] __x64_sys_openat+0xef/0x110 [ 888.527219][ T489] do_syscall_64+0x4a/0x90 [ 888.531979][ T489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.537983][ T489] RIP: 0033:0x4665d9 [ 888.541931][ T489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.563233][ T489] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.572316][ T489] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 06:34:47 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0), 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, 0x0, &(0x7f0000000000)=0x7) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:34:47 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:34:47 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:47 executing program 4 (fault-call:0 fault-nth:8): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:47 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:47 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6502, 0x0) [ 888.580404][ T489] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 888.589843][ T489] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.599151][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.607905][ T489] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 888.617400][ T489] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 06:34:47 executing program 0: socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 888.703270][ T532] FAULT_INJECTION: forcing a failure. [ 888.703270][ T532] name failslab, interval 1, probability 0, space 0, times 0 [ 888.716027][ T532] CPU: 0 PID: 532 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 888.724871][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.736005][ T532] Call Trace: [ 888.739289][ T532] dump_stack+0x137/0x19d [ 888.743806][ T532] should_fail+0x23c/0x250 [ 888.748406][ T532] __should_failslab+0x81/0x90 06:34:47 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x4, 0x13a80, 0x2, 0x40, 0x11, "f193a39e628b59184fad8904eeec39ba986309"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:47 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6503, 0x0) [ 888.753464][ T532] ? tty_open+0x7fa/0xb60 [ 888.758071][ T532] should_failslab+0x5/0x20 [ 888.762790][ T532] kmem_cache_alloc_trace+0x49/0x310 [ 888.768583][ T532] ? __schedule+0x4da/0x5b0 [ 888.773096][ T532] tty_open+0x7fa/0xb60 [ 888.777443][ T532] chrdev_open+0x39c/0x420 [ 888.781966][ T532] ? cd_forget+0x100/0x100 [ 888.786467][ T532] do_dentry_open+0x53e/0x830 [ 888.791287][ T532] vfs_open+0x43/0x50 [ 888.795428][ T532] path_openat+0x184e/0x20b0 06:34:47 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:sound_device_t:s0\x00', 0x24) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 888.800311][ T532] ? cgroup_rstat_updated+0x60/0x1c0 [ 888.806350][ T532] do_filp_open+0xd9/0x1f0 [ 888.811555][ T532] ? __check_object_size+0x253/0x310 [ 888.817170][ T532] ? alloc_fd+0x388/0x3e0 [ 888.821691][ T532] do_sys_openat2+0xa3/0x250 [ 888.826426][ T532] ? __cond_resched+0x11/0x40 [ 888.831298][ T532] __x64_sys_openat+0xef/0x110 [ 888.836286][ T532] do_syscall_64+0x4a/0x90 [ 888.840935][ T532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.846872][ T532] RIP: 0033:0x4665d9 06:34:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f00000000c0)=0xfffffffffffffdfd) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="1aa2be6fe0b439c0802e7e77974b6c93", 0x10) 06:34:47 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 888.850777][ T532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.870591][ T532] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.879442][ T532] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 888.887737][ T532] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 888.895885][ T532] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 06:34:47 executing program 2 (fault-call:0 fault-nth:0): pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:47 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6504, 0x0) 06:34:47 executing program 4 (fault-call:0 fault-nth:9): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:47 executing program 0: socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 888.903922][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.912331][ T532] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 888.980533][ T568] FAULT_INJECTION: forcing a failure. [ 888.980533][ T568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.993678][ T568] CPU: 1 PID: 568 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 889.002525][ T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.013101][ T568] Call Trace: [ 889.016409][ T568] dump_stack+0x137/0x19d [ 889.021007][ T568] should_fail+0x23c/0x250 [ 889.025713][ T568] should_fail_usercopy+0x16/0x20 [ 889.030749][ T568] _copy_to_user+0x1c/0x90 [ 889.035177][ T568] simple_read_from_buffer+0xab/0x120 [ 889.040618][ T568] proc_fail_nth_read+0xf6/0x140 [ 889.045579][ T568] ? rw_verify_area+0x136/0x250 [ 889.050607][ T568] ? proc_fault_inject_write+0x200/0x200 [ 889.056350][ T568] vfs_read+0x154/0x5d0 [ 889.058131][ T570] FAULT_INJECTION: forcing a failure. [ 889.058131][ T570] name failslab, interval 1, probability 0, space 0, times 0 [ 889.061184][ T568] ? vmacache_find+0x2d2/0x320 [ 889.061208][ T568] ? vmacache_update+0x87/0xa0 [ 889.061223][ T568] ? __fget_light+0x21b/0x260 [ 889.089363][ T568] ? __cond_resched+0x11/0x40 [ 889.094261][ T568] ksys_read+0xce/0x180 [ 889.098925][ T568] __x64_sys_read+0x3e/0x50 [ 889.103426][ T568] do_syscall_64+0x4a/0x90 [ 889.108104][ T568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 889.114334][ T568] RIP: 0033:0x41935c [ 889.118315][ T568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 889.139959][ T568] RSP: 002b:00007f5edfc53170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.148910][ T568] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 889.157503][ T568] RDX: 000000000000000f RSI: 00007f5edfc531e0 RDI: 0000000000000003 [ 889.165916][ T568] RBP: 00007f5edfc531d0 R08: 0000000000000000 R09: 0000000000000000 06:34:47 executing program 0: socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:47 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xcb32c53db7547db6, 0x0, &(0x7f0000000040)) 06:34:47 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:47 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6505, 0x0) 06:34:47 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 889.174766][ T568] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 889.183028][ T568] R13: 00007ffe7d083def R14: 00007f5edfc53300 R15: 0000000000022000 [ 889.191428][ T570] CPU: 0 PID: 570 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 889.200594][ T570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.211319][ T570] Call Trace: [ 889.214906][ T570] dump_stack+0x137/0x19d [ 889.219430][ T570] should_fail+0x23c/0x250 [ 889.224115][ T570] __should_failslab+0x81/0x90 06:34:47 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000010, 0xffffffffffffffff) [ 889.229159][ T570] should_failslab+0x5/0x20 [ 889.233853][ T570] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 889.239948][ T570] ? __kmalloc_node+0x30/0x40 [ 889.245334][ T570] ? __get_vm_area_node+0x226/0x260 [ 889.250740][ T570] __kmalloc_node+0x30/0x40 [ 889.257013][ T570] __vmalloc_node_range+0x250/0x5b0 [ 889.262696][ T570] ? klist_class_dev_get+0x20/0x20 [ 889.268870][ T570] ? n_tty_open+0x17/0xe0 [ 889.273735][ T570] vzalloc+0x5a/0x70 06:34:47 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{$+/\x00', 0x0, r1) [ 889.277741][ T570] ? n_tty_open+0x17/0xe0 [ 889.282200][ T570] n_tty_open+0x17/0xe0 [ 889.286729][ T570] tty_ldisc_setup+0x77/0x200 [ 889.291605][ T570] tty_init_dev+0x18e/0x340 [ 889.296391][ T570] tty_open+0x70c/0xb60 [ 889.301135][ T570] chrdev_open+0x39c/0x420 [ 889.305562][ T570] ? cd_forget+0x100/0x100 [ 889.310281][ T570] do_dentry_open+0x53e/0x830 [ 889.315587][ T570] vfs_open+0x43/0x50 [ 889.320869][ T570] path_openat+0x184e/0x20b0 [ 889.325786][ T570] ? cgroup_rstat_updated+0x60/0x1c0 [ 889.332161][ T570] do_filp_open+0xd9/0x1f0 [ 889.336678][ T570] ? alloc_fd+0x388/0x3e0 [ 889.341106][ T570] do_sys_openat2+0xa3/0x250 [ 889.345969][ T570] ? __cond_resched+0x11/0x40 [ 889.351260][ T570] __x64_sys_openat+0xef/0x110 [ 889.357420][ T570] do_syscall_64+0x4a/0x90 [ 889.362789][ T570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 889.368879][ T570] RIP: 0033:0x4665d9 06:34:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socketpair(0x2c, 0x80b, 0x853, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xc8, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x5a, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x43}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @initdev}, &(0x7f0000000380)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x40040004) [ 889.373245][ T570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.395472][ T570] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 889.404065][ T570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 889.412508][ T570] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 889.421093][ T570] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 06:34:48 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)=""/66, &(0x7f0000000080)=0x42) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x800, 0x70bd27, 0x25dfdbfd, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20004081}, 0x20004801) [ 889.429352][ T570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.437709][ T570] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 889.455034][ T570] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 889.498241][ T610] FAULT_INJECTION: forcing a failure. [ 889.498241][ T610] name failslab, interval 1, probability 0, space 0, times 0 [ 889.512687][ T610] CPU: 1 PID: 610 Comm: syz-executor.5 Not tainted 5.13.0-rc1-syzkaller #0 [ 889.521989][ T610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.532930][ T610] Call Trace: [ 889.536546][ T610] dump_stack+0x137/0x19d [ 889.541023][ T610] should_fail+0x23c/0x250 06:34:48 executing program 4 (fault-call:0 fault-nth:10): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:34:48 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r0) 06:34:48 executing program 1: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @mss={0x2, 0x1}, @sack_perm, @sack_perm], 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000001100), &(0x7f0000001140)=0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:48 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6506, 0x0) [ 889.545704][ T610] ? prepare_creds+0x2a/0x3f0 [ 889.550481][ T610] __should_failslab+0x81/0x90 [ 889.555568][ T610] should_failslab+0x5/0x20 [ 889.560214][ T610] kmem_cache_alloc+0x46/0x2f0 [ 889.565226][ T610] prepare_creds+0x2a/0x3f0 [ 889.569829][ T610] cap_task_prctl+0x23d/0x600 [ 889.574512][ T610] security_task_prctl+0x6d/0xf0 [ 889.579610][ T610] __do_sys_prctl+0x61/0xca0 [ 889.584527][ T610] ? ksys_write+0x157/0x180 [ 889.589298][ T610] ? fpregs_assert_state_consistent+0x7d/0x90 [ 889.595851][ T610] __x64_sys_prctl+0x62/0x70 [ 889.601034][ T610] do_syscall_64+0x4a/0x90 [ 889.605717][ T610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 889.612362][ T610] RIP: 0033:0x4665d9 [ 889.616478][ T610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.637377][ T610] RSP: 002b:00007fd5171eb188 EFLAGS: 00000246 ORIG_RAX: 000000000000009d 06:34:48 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6507, 0x0) [ 889.646026][ T610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 889.654003][ T610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 889.662109][ T610] RBP: 00007fd5171eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 889.670289][ T610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.678543][ T610] R13: 00007ffef511f8af R14: 00007fd5171eb300 R15: 0000000000022000 [ 889.688303][ T616] FAULT_INJECTION: forcing a failure. 06:34:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) 06:34:48 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 889.688303][ T616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 889.701872][ T616] CPU: 1 PID: 616 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 889.710951][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.721233][ T616] Call Trace: [ 889.724523][ T616] dump_stack+0x137/0x19d [ 889.729043][ T616] should_fail+0x23c/0x250 [ 889.733687][ T616] __alloc_pages+0x102/0x320 [ 889.738828][ T616] __vmalloc_node_range+0x319/0x5b0 [ 889.744468][ T616] ? n_tty_open+0x17/0xe0 06:34:48 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) [ 889.749123][ T616] vzalloc+0x5a/0x70 [ 889.753271][ T616] ? n_tty_open+0x17/0xe0 [ 889.757929][ T616] n_tty_open+0x17/0xe0 [ 889.762291][ T616] tty_ldisc_setup+0x77/0x200 [ 889.767426][ T616] tty_init_dev+0x18e/0x340 [ 889.772387][ T616] tty_open+0x70c/0xb60 [ 889.776911][ T616] chrdev_open+0x39c/0x420 [ 889.781681][ T616] ? cd_forget+0x100/0x100 [ 889.786118][ T616] do_dentry_open+0x53e/0x830 [ 889.787563][ T639] FAULT_INJECTION: forcing a failure. [ 889.787563][ T639] name failslab, interval 1, probability 0, space 0, times 0 [ 889.791086][ T616] vfs_open+0x43/0x50 [ 889.808012][ T616] path_openat+0x184e/0x20b0 [ 889.812838][ T616] ? cgroup_rstat_updated+0x60/0x1c0 [ 889.818125][ T616] do_filp_open+0xd9/0x1f0 [ 889.822892][ T616] ? alloc_fd+0x388/0x3e0 [ 889.827537][ T616] do_sys_openat2+0xa3/0x250 [ 889.832291][ T616] ? __cond_resched+0x11/0x40 [ 889.837229][ T616] __x64_sys_openat+0xef/0x110 [ 889.842080][ T616] do_syscall_64+0x4a/0x90 [ 889.846571][ T616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 889.852670][ T616] RIP: 0033:0x4665d9 [ 889.856729][ T616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.877323][ T616] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 889.886359][ T616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 889.894366][ T616] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 889.902910][ T616] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 889.911176][ T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.919566][ T616] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 889.927871][ T639] CPU: 0 PID: 639 Comm: syz-executor.5 Not tainted 5.13.0-rc1-syzkaller #0 [ 889.937368][ T639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:34:48 executing program 4 (fault-call:0 fault-nth:11): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) [ 889.947853][ T639] Call Trace: [ 889.951313][ T639] dump_stack+0x137/0x19d [ 889.952912][ T616] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 889.955827][ T639] should_fail+0x23c/0x250 [ 889.955848][ T639] ? kzalloc+0x1d/0x30 [ 889.955868][ T639] __should_failslab+0x81/0x90 [ 889.976914][ T639] should_failslab+0x5/0x20 [ 889.981506][ T639] __kmalloc+0x66/0x340 [ 889.985856][ T639] kzalloc+0x1d/0x30 [ 889.989991][ T639] security_prepare_creds+0x44/0x1a0 [ 889.995746][ T639] prepare_creds+0x2d4/0x3f0 06:34:48 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6509, 0x0) [ 890.000846][ T639] cap_task_prctl+0x23d/0x600 [ 890.006204][ T639] security_task_prctl+0x6d/0xf0 [ 890.011339][ T639] __do_sys_prctl+0x61/0xca0 [ 890.016232][ T639] ? ksys_write+0x157/0x180 [ 890.020821][ T639] ? fpregs_assert_state_consistent+0x7d/0x90 [ 890.027147][ T639] __x64_sys_prctl+0x62/0x70 [ 890.031837][ T639] do_syscall_64+0x4a/0x90 [ 890.036354][ T639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 890.042435][ T639] RIP: 0033:0x4665d9 06:34:48 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r4) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008014}, 0xc4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x4000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfd, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x404c080}, 0x10) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f00000006c0)={0x1, 0x5, 0x3, 0x9, 0x5, "bb19fe5ee0f2cfbc2f2fc807991713c543dad9", 0x717, 0x2}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) [ 890.046426][ T639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.066869][ T639] RSP: 002b:00007fd5171eb188 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 890.076320][ T639] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 890.076783][ T652] FAULT_INJECTION: forcing a failure. [ 890.076783][ T652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:34:48 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 890.084510][ T639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 890.084525][ T639] RBP: 00007fd5171eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.084537][ T639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.084548][ T639] R13: 00007ffef511f8af R14: 00007fd5171eb300 R15: 0000000000022000 [ 890.134927][ T652] CPU: 1 PID: 652 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 890.143909][ T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.154611][ T652] Call Trace: [ 890.158159][ T652] dump_stack+0x137/0x19d [ 890.162862][ T652] should_fail+0x23c/0x250 [ 890.167288][ T652] __alloc_pages+0x102/0x320 [ 890.171966][ T652] __vmalloc_node_range+0x319/0x5b0 [ 890.177439][ T652] ? n_tty_open+0x17/0xe0 [ 890.182131][ T652] vzalloc+0x5a/0x70 [ 890.186334][ T652] ? n_tty_open+0x17/0xe0 [ 890.190785][ T652] n_tty_open+0x17/0xe0 [ 890.195445][ T652] tty_ldisc_setup+0x77/0x200 06:34:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="4407db4bf8dbf3d4d479ad6e1e9fae88", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) [ 890.200480][ T652] tty_init_dev+0x18e/0x340 [ 890.205024][ T652] tty_open+0x70c/0xb60 [ 890.209436][ T652] chrdev_open+0x39c/0x420 [ 890.214038][ T652] ? cd_forget+0x100/0x100 [ 890.219019][ T652] do_dentry_open+0x53e/0x830 [ 890.223722][ T652] vfs_open+0x43/0x50 [ 890.227964][ T652] path_openat+0x184e/0x20b0 [ 890.232711][ T652] ? cgroup_rstat_updated+0x60/0x1c0 [ 890.238320][ T652] do_filp_open+0xd9/0x1f0 [ 890.242842][ T652] ? alloc_fd+0x388/0x3e0 [ 890.247314][ T652] do_sys_openat2+0xa3/0x250 06:34:48 executing program 1: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/16, &(0x7f0000000100)=0x10) [ 890.251953][ T652] ? __cond_resched+0x11/0x40 [ 890.256652][ T652] __x64_sys_openat+0xef/0x110 [ 890.262035][ T652] do_syscall_64+0x4a/0x90 [ 890.266633][ T652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 890.272722][ T652] RIP: 0033:0x4665d9 [ 890.276645][ T652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:34:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) [ 890.296636][ T652] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 890.305434][ T652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 890.313683][ T652] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 890.322104][ T652] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.330461][ T652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 890.338796][ T652] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 [ 890.343861][ T690] FAULT_INJECTION: forcing a failure. [ 890.343861][ T690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.360753][ T690] CPU: 0 PID: 690 Comm: syz-executor.5 Not tainted 5.13.0-rc1-syzkaller #0 [ 890.369719][ T690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.373169][ T652] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 890.380002][ T690] Call Trace: [ 890.395023][ T690] dump_stack+0x137/0x19d [ 890.399984][ T690] should_fail+0x23c/0x250 [ 890.405271][ T690] should_fail_usercopy+0x16/0x20 [ 890.410496][ T690] _copy_to_user+0x1c/0x90 [ 890.415394][ T690] simple_read_from_buffer+0xab/0x120 [ 890.421274][ T690] proc_fail_nth_read+0xf6/0x140 [ 890.426389][ T690] ? rw_verify_area+0x136/0x250 [ 890.431646][ T690] ? proc_fault_inject_write+0x200/0x200 [ 890.438022][ T690] vfs_read+0x154/0x5d0 [ 890.442803][ T690] ? security_task_prctl+0xd0/0xf0 06:34:49 executing program 4 (fault-call:0 fault-nth:12): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:49 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 06:34:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6510, 0x0) [ 890.448674][ T690] ? __fget_light+0x21b/0x260 [ 890.453504][ T690] ? __cond_resched+0x11/0x40 [ 890.458199][ T690] ksys_read+0xce/0x180 [ 890.462428][ T690] __x64_sys_read+0x3e/0x50 [ 890.467410][ T690] do_syscall_64+0x4a/0x90 [ 890.472104][ T690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 890.478228][ T690] RIP: 0033:0x41935c [ 890.482130][ T690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 06:34:49 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='/dev/usbmon#\x00', 0x0, r1) 06:34:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6518, 0x0) [ 890.503109][ T690] RSP: 002b:00007fd5171eb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 890.512051][ T690] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 890.521557][ T690] RDX: 000000000000000f RSI: 00007fd5171eb1e0 RDI: 0000000000000004 [ 890.530403][ T690] RBP: 00007fd5171eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.538966][ T690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.547125][ T690] R13: 00007ffef511f8af R14: 00007fd5171eb300 R15: 0000000000022000 [ 890.573339][ T701] FAULT_INJECTION: forcing a failure. [ 890.573339][ T701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 890.586934][ T701] CPU: 1 PID: 701 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 890.595522][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.606331][ T701] Call Trace: [ 890.609615][ T701] dump_stack+0x137/0x19d [ 890.614453][ T701] should_fail+0x23c/0x250 [ 890.618973][ T701] __alloc_pages+0x102/0x320 [ 890.623790][ T701] alloc_pages+0x21d/0x310 [ 890.628467][ T701] get_zeroed_page+0x13/0x40 [ 890.633155][ T701] uart_startup+0x135/0x530 [ 890.637992][ T701] uart_port_activate+0x5f/0xb0 [ 890.643044][ T701] tty_port_open+0x186/0x220 [ 890.647879][ T701] uart_open+0x2c/0x50 [ 890.652232][ T701] tty_open+0x40d/0xb60 [ 890.656488][ T701] chrdev_open+0x39c/0x420 [ 890.661132][ T701] ? cd_forget+0x100/0x100 [ 890.666175][ T701] do_dentry_open+0x53e/0x830 [ 890.671001][ T701] vfs_open+0x43/0x50 [ 890.675092][ T701] path_openat+0x184e/0x20b0 [ 890.680009][ T701] do_filp_open+0xd9/0x1f0 [ 890.684618][ T701] ? alloc_fd+0x388/0x3e0 [ 890.689042][ T701] do_sys_openat2+0xa3/0x250 [ 890.693854][ T701] ? __cond_resched+0x11/0x40 [ 890.698930][ T701] __x64_sys_openat+0xef/0x110 [ 890.703882][ T701] do_syscall_64+0x4a/0x90 [ 890.708801][ T701] ? irqentry_exit_to_user_mode+0x5/0x20 [ 890.714889][ T701] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 890.720971][ T701] RIP: 0033:0x4665d9 [ 890.725413][ T701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.745618][ T701] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:49 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/16, &(0x7f0000000100)=0x10) 06:34:49 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x1) syz_io_uring_setup(0xfa53, &(0x7f0000000000)={0x0, 0x2af3, 0x2, 0x2, 0x25c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pkey_alloc(0x0, 0x0) pkey_free(r0) 06:34:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x0, 0xe, 0x0, "2583f9ae3f14d99ea3f29048e752df65d5cf0056e83d4d15534f685cd05a1f47088e3f0c493baa5161fc42e87aa3f8dccdbb8f05488f2c91cf296f6016fe8253c0b24c784a048e128590d7160f0a7160"}, 0xd8) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:49 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9d, 0x7, 0x31, 0xec, 0x0, 0xdf36, 0x4280, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x46806, 0x4, 0x2, 0x2, 0xfff, 0xdb, 0x0, 0x0, 0x8, 0x0, 0xd42}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x1, 0x3, 0x7f, 0x0, 0x40, 0x20, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x46, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x1810, 0x100000001, 0x10000, 0x6, 0xfffffffffffffffd, 0xfffffff8, 0x8001, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r0, 0x3) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x5, 0x9, 0xd9, 0x0, 0x6, 0x1000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0xff, 0x1}, 0x6000, 0x4, 0x28, 0x0, 0x6, 0xb42a, 0x3, 0x0, 0xfa74, 0x0, 0x10000}, 0xffffffffffffffff, 0x8, r1, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_io_uring_setup(0x3e88, &(0x7f0000000000)={0x0, 0x799, 0x0, 0x1, 0x1fe, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 06:34:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) [ 890.754329][ T701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 890.763305][ T701] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 890.771566][ T701] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.779675][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 890.788127][ T701] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:49 executing program 4 (fault-call:0 fault-nth:13): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:49 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2aa00000a8512960582231c4f6e244a65c202187bfbe1f526a109093e29e72f59803016712335e8596047a0e29c52f45c398e50bddfb7e00e5f977cb55812b3d80ffb61bea3a11b6863fff8058f0b29fbf7135e3fe58d1c45879efa329d0a837acedb3e3613144d74322022f93d483202ac4392c109f414f051cfd8483a3fd41199d2bbff5fb22eae59672ab230062", @ANYRES16=0x0, @ANYBLOB="0e382bbd7000fedbdf250200000008ccef600cb4b0984bbefb97a4b14f9d9309b0b058adb8d693d93f2677590703bb978c6632642078e85f85d3625d207d363d0645ebdd81fa19549938d7ba4c671f31a23497f6b8fa146467c1acfe68ae36c840a84aba72b512cb1bd1589d238d820a19371bf5d573da2b"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20048000) socketpair(0x2b, 0x800, 0xf24d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:49 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/16, &(0x7f0000000100)=0x10) 06:34:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc651d, 0x0) [ 890.903095][ T758] FAULT_INJECTION: forcing a failure. [ 890.903095][ T758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 890.916903][ T758] CPU: 1 PID: 758 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 890.925705][ T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.936315][ T758] Call Trace: [ 890.940067][ T758] dump_stack+0x137/0x19d [ 890.944706][ T758] should_fail+0x23c/0x250 [ 890.949663][ T758] __alloc_pages+0x102/0x320 [ 890.954496][ T758] alloc_pages+0x21d/0x310 [ 890.958943][ T758] get_zeroed_page+0x13/0x40 [ 890.964082][ T758] uart_startup+0x135/0x530 [ 890.969083][ T758] uart_port_activate+0x5f/0xb0 [ 890.974295][ T758] tty_port_open+0x186/0x220 [ 890.979094][ T758] uart_open+0x2c/0x50 [ 890.983899][ T758] tty_open+0x40d/0xb60 [ 890.988290][ T758] chrdev_open+0x39c/0x420 [ 890.992810][ T758] ? cd_forget+0x100/0x100 [ 890.997325][ T758] do_dentry_open+0x53e/0x830 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:49 executing program 1: r0 = syz_io_uring_setup(0x6cd1, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000500)={0x820, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7b73}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x78d}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x7, 0x0, 0x5}, {0x9, 0x7, 0x7f, 0x40}, {0x8, 0x3f, 0x6, 0x56f}, {0x3, 0x4, 0x1, 0x9}, {0x9, 0x0, 0x2, 0x3ff}, {0xeb6d, 0x6, 0x37, 0xffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x1, 0x80, 0x2}, {0x7, 0x81, 0x8, 0x7f}, {0x8, 0x6, 0xc3, 0x5}, {0x6eb, 0x0, 0x3f, 0x7}, {0x8001, 0x9, 0x82, 0xffff4080}, {0x1, 0x9, 0x3f, 0x5}, {0x100, 0xc1, 0x4, 0x200}, {0xff, 0x0, 0x3, 0x8000}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x80, 0x7, 0xe7}, {0x3f, 0x1, 0xa, 0x10000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa48eff1d}}}]}}]}, 0x820}, 0x1, 0x0, 0x0, 0x40000}, 0x800) getsockopt$inet_tcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socketpair(0x1a, 0x80000, 0x3f, &(0x7f0000000ec0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000f40), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000001080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000010c0)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000001300)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000001680)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2e4, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r11}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x1, 0x2a, 0x3}, {0x1ff, 0x3f, 0x3, 0x6}, {0x0, 0xf7, 0x9, 0x20002000}, {0x6, 0x0, 0xfc, 0x6}, {0x0, 0xfd, 0x9, 0x2}, {0x4, 0x7, 0x40, 0x101}, {0x400, 0x1, 0x9, 0x3}, {0x800, 0x1f, 0x9, 0xfffffff9}, {0x3, 0x1, 0x9, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x0, 0x936}, {0xffff, 0x37, 0x8, 0x4}, {0x47d, 0x8, 0x7, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}, {0x8, 0x6, r6}}}]}}]}, 0x2e4}}, 0x8050) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r12, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8840) [ 891.002336][ T758] vfs_open+0x43/0x50 [ 891.006865][ T758] path_openat+0x184e/0x20b0 [ 891.011559][ T758] ? cgroup_rstat_updated+0x60/0x1c0 [ 891.017149][ T758] do_filp_open+0xd9/0x1f0 [ 891.021743][ T758] ? alloc_fd+0x388/0x3e0 [ 891.026266][ T758] do_sys_openat2+0xa3/0x250 [ 891.031042][ T758] ? __cond_resched+0x11/0x40 [ 891.035738][ T758] __x64_sys_openat+0xef/0x110 [ 891.040620][ T758] do_syscall_64+0x4a/0x90 [ 891.045526][ T758] entry_SYSCALL_64_after_hwframe+0x44/0xae 06:34:49 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/16, &(0x7f0000000100)=0x10) 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) [ 891.051795][ T758] RIP: 0033:0x4665d9 [ 891.055903][ T758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.076624][ T758] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.085570][ T758] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 891.093727][ T758] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c 06:34:49 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 891.101853][ T758] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.110142][ T758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.118384][ T758] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc651e, 0x0) 06:34:49 executing program 4 (fault-call:0 fault-nth:14): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:49 executing program 2: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:49 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 06:34:49 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6548, 0x0) 06:34:49 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:49 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, r1) [ 891.289590][ T828] FAULT_INJECTION: forcing a failure. [ 891.289590][ T828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 891.303443][ T828] CPU: 1 PID: 828 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 891.313063][ T828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.323462][ T828] Call Trace: [ 891.326748][ T828] dump_stack+0x137/0x19d [ 891.331240][ T828] should_fail+0x23c/0x250 [ 891.335792][ T828] __alloc_pages+0x102/0x320 [ 891.340660][ T828] alloc_pages+0x21d/0x310 [ 891.345485][ T828] get_zeroed_page+0x13/0x40 [ 891.350265][ T828] uart_startup+0x135/0x530 [ 891.354956][ T828] uart_port_activate+0x5f/0xb0 [ 891.359901][ T828] tty_port_open+0x186/0x220 [ 891.364595][ T828] uart_open+0x2c/0x50 [ 891.369181][ T828] tty_open+0x40d/0xb60 [ 891.373516][ T828] chrdev_open+0x39c/0x420 [ 891.378645][ T828] ? cd_forget+0x100/0x100 [ 891.383074][ T828] do_dentry_open+0x53e/0x830 06:34:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) getpgid(r1) r2 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000380)={0x44000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/207, 0xcf, &(0x7f0000000240)=""/118, &(0x7f0000000340)=[r1, 0xffffffffffffffff, r2, 0x0, r4, 0xffffffffffffffff, r5], 0x7}, 0x58) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:50 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 06:34:50 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc654c, 0x0) 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) [ 891.389612][ T828] vfs_open+0x43/0x50 [ 891.393745][ T828] path_openat+0x184e/0x20b0 [ 891.398441][ T828] ? cgroup_rstat_updated+0x60/0x1c0 [ 891.404164][ T828] do_filp_open+0xd9/0x1f0 [ 891.408777][ T828] ? alloc_fd+0x388/0x3e0 [ 891.413219][ T828] do_sys_openat2+0xa3/0x250 [ 891.418156][ T828] ? __cond_resched+0x11/0x40 [ 891.423157][ T828] __x64_sys_openat+0xef/0x110 [ 891.428388][ T828] do_syscall_64+0x4a/0x90 [ 891.433083][ T828] entry_SYSCALL_64_after_hwframe+0x44/0xae 06:34:50 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 891.439267][ T828] RIP: 0033:0x4665d9 [ 891.443235][ T828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.463525][ T828] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.472216][ T828] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 891.480460][ T828] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 891.489244][ T828] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.498109][ T828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.506559][ T828] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:50 executing program 4 (fault-call:0 fault-nth:15): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1000000) 06:34:50 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:50 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="2001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r1, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900150104000000000008be01000000030001600900000007002002090000003305020501010000140001070100000001000201070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757068a1a06c000000020000000000000000000000000700000300060000000300040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f000000000000000000000000000000000005000300030000000800040000000100"], 0x230}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6568, 0x0) [ 891.639447][ T885] FAULT_INJECTION: forcing a failure. [ 891.639447][ T885] name failslab, interval 1, probability 0, space 0, times 0 [ 891.653203][ T885] CPU: 0 PID: 885 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 891.663014][ T885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.673597][ T885] Call Trace: [ 891.676880][ T885] dump_stack+0x137/0x19d [ 891.681572][ T885] should_fail+0x23c/0x250 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0xdaffffff) 06:34:50 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xdb2) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 06:34:50 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc656c, 0x0) [ 891.686205][ T885] __should_failslab+0x81/0x90 [ 891.691049][ T885] ? request_threaded_irq+0x1a4/0x2c0 [ 891.696757][ T885] should_failslab+0x5/0x20 [ 891.701799][ T885] kmem_cache_alloc_trace+0x49/0x310 [ 891.707584][ T885] ? radix_tree_lookup+0xf5/0x140 [ 891.712956][ T885] ? serial8250_backup_timeout+0x2f0/0x2f0 [ 891.719201][ T885] request_threaded_irq+0x1a4/0x2c0 [ 891.724412][ T885] ? serial8250_backup_timeout+0x2f0/0x2f0 [ 891.730567][ T885] univ8250_setup_irq+0x3c1/0x440 06:34:50 executing program 0: socketpair(0x10, 0x2, 0x2, &(0x7f0000000000)) [ 891.735871][ T885] serial8250_do_startup+0xd54/0x1340 [ 891.741629][ T885] serial8250_startup+0x37/0x40 [ 891.746708][ T885] uart_startup+0x34d/0x530 [ 891.751760][ T885] uart_port_activate+0x5f/0xb0 [ 891.756831][ T885] tty_port_open+0x186/0x220 [ 891.761875][ T885] uart_open+0x2c/0x50 [ 891.766530][ T885] tty_open+0x40d/0xb60 [ 891.770854][ T885] chrdev_open+0x39c/0x420 [ 891.775814][ T885] ? cd_forget+0x100/0x100 [ 891.780316][ T885] do_dentry_open+0x53e/0x830 [ 891.785053][ T885] vfs_open+0x43/0x50 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0xffffffda) [ 891.789180][ T885] path_openat+0x184e/0x20b0 [ 891.793985][ T885] ? cgroup_rstat_updated+0x60/0x1c0 [ 891.799450][ T885] do_filp_open+0xd9/0x1f0 [ 891.804135][ T885] ? alloc_fd+0x388/0x3e0 [ 891.808656][ T885] do_sys_openat2+0xa3/0x250 [ 891.813546][ T885] ? __cond_resched+0x11/0x40 [ 891.818691][ T885] __x64_sys_openat+0xef/0x110 [ 891.823613][ T885] do_syscall_64+0x4a/0x90 [ 891.828108][ T885] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 891.834195][ T885] RIP: 0033:0x4665d9 06:34:50 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) [ 891.838085][ T885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.858614][ T885] RSP: 002b:00007f610a785188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.867083][ T885] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 891.875499][ T885] RDX: 00000000000c6500 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 891.884073][ T885] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.892328][ T885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.900579][ T885] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:50 executing program 4 (fault-call:0 fault-nth:16): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6574, 0x0) 06:34:50 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) pkey_alloc(0x0, 0x3) r1 = pkey_alloc(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404c00, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, r1) 06:34:50 executing program 1: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000200)={{r2, r3/1000+10000}, {r0, r1/1000+60000}}, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @private=0xa010101}}, 0x0, 0x0, 0x2d, 0x0, "d19ff0641fc1a4f4c78ed4e9afd3d169a727b487eac4a7e9ae3beb5c1bf9917c6a3ff7d234b423f3baae4d0dc9c350b2f39459327b09f6a3fcfa5fe4817cb47763741082b7e64db1bacb08e68666447c"}, 0xd8) 06:34:50 executing program 0: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x100000000000000) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc657a, 0x0) 06:34:50 executing program 2: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[r0, r1]}, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0xdaffffff00000000) 06:34:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc65c0, 0x0) [ 892.091858][ T945] FAULT_INJECTION: forcing a failure. [ 892.091858][ T945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.105139][ T945] CPU: 1 PID: 945 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 892.114022][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.125183][ T945] Call Trace: [ 892.128728][ T945] dump_stack+0x137/0x19d [ 892.133165][ T945] should_fail+0x23c/0x250 06:34:50 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2800005, r0) pkey_free(r0) [ 892.137687][ T945] should_fail_usercopy+0x16/0x20 [ 892.144366][ T945] _copy_to_user+0x1c/0x90 [ 892.149061][ T945] simple_read_from_buffer+0xab/0x120 [ 892.154539][ T945] proc_fail_nth_read+0xf6/0x140 [ 892.159665][ T945] ? rw_verify_area+0x136/0x250 [ 892.164868][ T945] ? proc_fault_inject_write+0x200/0x200 [ 892.170915][ T945] vfs_read+0x154/0x5d0 [ 892.175440][ T945] ? __fput+0x43e/0x4e0 [ 892.179672][ T945] ? __fget_light+0x21b/0x260 [ 892.184444][ T945] ? __cond_resched+0x11/0x40 [ 892.189430][ T945] ksys_read+0xce/0x180 [ 892.193772][ T945] __x64_sys_read+0x3e/0x50 [ 892.198450][ T945] do_syscall_64+0x4a/0x90 [ 892.203329][ T945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.209662][ T945] RIP: 0033:0x41935c [ 892.213824][ T945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 892.233955][ T945] RSP: 002b:00007f610a785170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 06:34:50 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:34:50 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@local}}, {{@in=@private}, 0x0, @in6=@ipv4}}, &(0x7f0000000100)=0xe8) [ 892.242861][ T945] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 892.251272][ T945] RDX: 000000000000000f RSI: 00007f610a7851e0 RDI: 0000000000000003 [ 892.259426][ T945] RBP: 00007f610a7851d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.267571][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.275638][ T945] R13: 00007fffe672a5bf R14: 00007f610a785300 R15: 0000000000022000 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2) 06:34:50 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0xfe94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x81) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @mss={0x2, 0x9}, @timestamp], 0x3) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:50 executing program 0: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 06:34:50 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:34:50 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6502, 0x0) 06:34:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDISABIO(r0, 0x4b37) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:34:51 executing program 0: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4) 06:34:51 executing program 0: socketpair(0x10, 0x0, 0x2, &(0x7f0000000000)) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6503, 0x0) 06:34:51 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) write$selinux_attr(r0, 0x0, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x5) 06:34:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @dev}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000001240)={0x5, 0x0, &(0x7f0000001200)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r7, r0]}, 0x6) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='cgroup.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0xd1}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @broadcast}, &(0x7f0000000500)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @broadcast}, &(0x7f0000000580)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @dev, @remote}, &(0x7f0000000600)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000000), 0xc, &(0x7f0000000e00)={&(0x7f0000000680)={0x748, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2fc8611a}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc0000}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff4ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff01d}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r13}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa8b0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x28ed, 0x6, 0x2, 0x8}, {0x2, 0x1, 0x7, 0x873}, {0x1ff, 0x1, 0x6a, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x31, 0x81, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff04f7}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x748}}, 0x20000040) 06:34:51 executing program 0: socketpair(0x10, 0x0, 0x2, &(0x7f0000000000)) 06:34:51 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, r0) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) clone3(&(0x7f0000001400)={0x4044100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0x0], 0x1}, 0x58) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdae1e) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6504, 0x0) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6) 06:34:51 executing program 0: socketpair(0x10, 0x0, 0x2, &(0x7f0000000000)) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6505, 0x0) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7) 06:34:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:dhcpd_state_t:s0\x00', 0x23) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6506, 0x0) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8) 06:34:51 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x7fff, 0x4, 0x77, 0x6, 0x40, "9081b8f385cdf740d22dc2f50b1dc83d9a87dc", 0x4, 0x81}) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x3, @mcast2, 0x9}}, 0x0, 0x0, 0x3c, 0x0, "6d55f31d1bc394d1fa83f6a495e48fc70ce41a693c5c1636e5dce34ee2deb36b9b521a050443c0023550ee3eeae7f17b036443d5e0621d8b7d3e21baf53b7598b54f28a244be61df0196592cf79387bf"}, 0xd8) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)=""/130, &(0x7f00000000c0)=0x82) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0xffffffffffffffff) 06:34:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x2, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="d218dce4d68582430aaa3ec634be9e3a", 0x10) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6507, 0x0) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='dirsync\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x39e2b) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x29ba) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5b, 0x60601) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x18) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x910, r0, 0x2) 06:34:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x80000001) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x2, 0x0) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', &(0x7f0000000080)='./file0\x00', r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6509, 0x0) 06:34:51 executing program 2: socketpair(0x28, 0x80e, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = socket$inet(0x2, 0x5, 0x3f) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) r7 = fsopen(&(0x7f0000000180)='adfs\x00', 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r9, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[r2, r3, 0xffffffffffffffff, r4, r5, r6, r7, r8, r1, r9]}, 0xa) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x2, 0x8, 0x2, 0x1f, 0x4, "104076951d991168ff8886e02a328516a456bd"}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsmount(r1, 0x1, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d) 06:34:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="02000000", @ANYRES16=r1, @ANYBLOB="00082cbd7000ffdbdf25050000000c0003000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040000) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x3b, 0x0, "4e4ec02bda7d54b7cc912eab5b4370561852a08b5912cf7c62f11dff01b461c376cf8da92520eaf33c5b68ac15176c0a06c9680532babdb3f364505d8acb599abfaf4cb4de40bc1de477591a3098c233"}, 0xd8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x2, 0x0) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:51 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6510, 0x0) 06:34:51 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e, 0xffffffffffffffff) 06:34:51 executing program 0: socketpair(0x10, 0x2, 0x2, 0x0) 06:34:51 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e) 06:34:51 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='sync\x00', &(0x7f0000000080)='sync\x00', 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x4, 0x0, &(0x7f00000000c0)=0x4) socket$inet6(0xa, 0x5, 0x200) 06:34:51 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getegid() pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setuid(r2) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6518, 0x0) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pkey_alloc(0x0, 0x2) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020010bd7000ffdbc825030100000800010001000000080002000200000008000200020000808cae3ca235aca6e9f7772f607168b6cae4a907000000c20a751fbdc16464d8aa6473f9c134a2678115bb59f50686747ad0d3"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) pipe2$9p(&(0x7f0000000000), 0x2000) socket$inet6(0xa, 0x6, 0x2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x2) 06:34:52 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x2, 0xa, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x48) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x274b, 0x9, 0x2, 0x6, 0x0, "11ecb754f034fd4272d1b7291ada8bfab25ee2", 0x34, 0x6}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x0, r1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) write$eventfd(r2, &(0x7f00000001c0)=0x1ff, 0x8) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x3f8, 0x300, 0x1070bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) 06:34:52 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc651d, 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 06:34:52 executing program 2: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c) 06:34:52 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair(0x2c, 0x80000, 0x3ff, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0xfffffea6) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) write$selinux_attr(r1, 0x0, 0xffffffffffffffd1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 06:34:52 executing program 0: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc651e, 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x68) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x401}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000180)=r2, 0x1) r4 = syz_open_pts(r1, 0x200) ioctl$TIOCGPTPEER(r4, 0x5441, 0x100000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) prctl$PR_SET_KEEPCAPS(0x8, 0x3) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/91) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pkey_free(0xffffffffffffffff) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xaf83dbf1203d42e7, 0x810, r1, 0x8000000) 06:34:52 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6548, 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 06:34:52 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc654c, 0x0) 06:34:52 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) write$selinux_attr(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x100000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x100000e, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) getegid() pkey_free(0xffffffffffffffff) 06:34:52 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f0000000000)) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080), 0x4) write$selinux_attr(r0, 0x0, 0x0) ioctl$KDDISABIO(r1, 0x4b37) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x74) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6568, 0x0) 06:34:52 executing program 1: pipe(&(0x7f0000000e00)) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0xffffffffffffffff) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x1, 0x1, 0x8, 0x1, 0x190, &(0x7f0000000180)}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000055) r3 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x4b0) 06:34:52 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc656c, 0x0) 06:34:52 executing program 1: pipe(&(0x7f0000000e00)) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6574, 0x0) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/85, &(0x7f00000000c0)=0x55) 06:34:52 executing program 2: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000f, r0) 06:34:52 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 06:34:52 executing program 1: pipe(&(0x7f0000000e00)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc657a, 0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x96) 06:34:52 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:52 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', &(0x7f0000000080)='@@^/%\\*\x00', 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc65c0, 0x0) 06:34:52 executing program 0: socketpair(0x10, 0x2, 0x0, 0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc0) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x101, 0x400) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x20010, r3, 0x2) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/255, &(0x7f0000000100)=0xff) pkey_free(0xffffffffffffffff) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f00000001c0)) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x101, 0x2c2, 0x0, 0xfeff, 0xd, "ea66ebe759a88b3a"}) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0xfffffe55) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0xaf0}}, {@fscache}], [{@measure}]}}) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x300) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:52 executing program 0: socketpair(0x10, 0x2, 0x0, 0x0) 06:34:52 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = io_uring_setup(0x5488, &(0x7f0000000000)={0x0, 0x8ad2, 0x20, 0x2, 0xbf}) syz_io_uring_setup(0x69cd, &(0x7f0000000080)={0x0, 0x4034, 0x2, 0x1, 0xd3, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x500) 06:34:52 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3) 06:34:52 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r1, 0x8000000) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:52 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(0x0) 06:34:52 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x600) 06:34:53 executing program 0: socketpair(0x10, 0x2, 0x0, 0x0) 06:34:53 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(0x0) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4) 06:34:53 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(0x0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x5, 0x2, 0x8cd9}) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x700) 06:34:53 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x5) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x900) 06:34:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x96) 06:34:53 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0xffffffffffffffff) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$usbmon(r2, &(0x7f0000000100)=""/253, 0xfd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x101, 0x7}, @window={0x3, 0x7, 0x8}, @sack_perm, @timestamp, @mss={0x2, 0x6}, @mss={0x2, 0xffffee6b}], 0x6) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x80000000000001) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1010) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) 06:34:53 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 06:34:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='hostfs\x00', 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x80) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='&-)\x00', &(0x7f00000000c0)='./file0\x00', r2) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:53 executing program 0: pipe(&(0x7f0000000e00)) 06:34:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x48) 06:34:53 executing program 0: pipe(&(0x7f0000000e00)) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1800) 06:34:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3) 06:34:53 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 06:34:53 executing program 0: pipe(&(0x7f0000000e00)) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d00) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r1, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6568, 0x0) 06:34:53 executing program 2: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x80003, 0x7fffffff, 0xd08, 0xb43d, 0x1d, "34e253b800", 0x8, 0x80000001}) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e00) 06:34:53 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='{\xa4\x00', 0x0, r0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(0x0) 06:34:53 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9) 06:34:53 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pipe(0x0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8008880}, 0x801) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009}, 0x8000) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x19, 0x0, "b721bdc1dfcb2a8e33587f3d9f6a2dad47f0b348de788d780d6a13c65d95a6c6f544fde80078880597f30f22a754181d54ef9123b5741c0a5bd2f0b6e2ee8ed3e78468facab794cd0f98970e7633dbc0"}, 0xd8) 06:34:53 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f00) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0xa, 0x2, &(0x7f0000000140)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) 06:34:53 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x101102) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x3) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000100)=0x0) r2 = getgid() getgroups(0x4, &(0x7f0000000000)=[0x0, r2, 0xffffffffffffffff, r1]) getgroups(0x5, &(0x7f0000000040)=[r3, 0xee00, 0xee00, 0x0, 0xee01]) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 06:34:53 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000) 06:34:53 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:53 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x40010) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, r2, r3]) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0xffffffffffffffff) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x18) 06:34:53 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r1, 0x8400) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x7, 0x1}, @sack_perm, @timestamp], 0x4) fsmount(r2, 0x0, 0x188) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000080)) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) 06:34:53 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4800) 06:34:53 executing program 1: prctl$PR_SET_KEEPCAPS(0x2f, 0x0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000011) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d) 06:34:53 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:53 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, r0) 06:34:53 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8, 0x7f, 0x5, 0x1ff, 0x10, "46edc4f6fbc3eff6be38468b4eb43703ede5db"}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x20, 0x1, 0x9, 0x0, 0x9, 0x20000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x401, 0x5}, 0x800, 0x31d4400e, 0x6, 0x0, 0x5, 0x7f, 0x5, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, r1, 0x3) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:53 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e) 06:34:53 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c00) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, r1) 06:34:54 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:54 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x48) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, r1) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x5, 0xffffffffffffffff) clock_getres(0x5, &(0x7f0000000000)) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6800) 06:34:54 executing program 0: prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, r1) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c00) 06:34:54 executing program 2: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$usbmon(r1, &(0x7f0000000000)=""/178, 0xb2) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/30, 0x1e}) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r1, 0x5) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 5: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) pkey_alloc(0x0, 0x0) r2 = getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = gettid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x1, r2, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0x2}, 0x1, 0x393, 0x5, 0x80000000, r3, r4, 0x3f}) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0xffffffffffffffff) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x68) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7400) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0xffffffffffffffff) 06:34:54 executing program 5: r0 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r5 = getpgid(r2) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r1, r1, r0, r1], 0x8, {r3}}, 0x58) getpgid(r4) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r6, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) io_uring_enter(0xffffffffffffffff, 0x3239, 0x9c22, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a00) 06:34:54 executing program 1: pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0xffffffffffffffff) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:54 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0xffffffffffffffff) 06:34:54 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x74) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9600) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, r0) 06:34:54 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a) 06:34:54 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r1, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc000) 06:34:54 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f) 06:34:54 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x3e) prctl$PR_SET_KEEPCAPS(0x8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x96) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="0425832c5221f5a7c489d112", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf250000000006000600000000000800080001000000080008000100000008000800000000000c00030002000000000000000800090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0x12, 0x14c}) 06:34:54 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:54 executing program 0: prctl$PR_SET_KEEPCAPS(0x1b, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3ffff) 06:34:54 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:54 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:54 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000) 06:34:54 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000810}, 0xc0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x300) 06:34:54 executing program 2: pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r0) 06:34:54 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x44000) 06:34:54 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x13, 0xffffffffffffffff, 0x10000000) pkey_alloc(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x500) 06:34:54 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4040000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 06:34:54 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:54 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80000) 06:34:54 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:54 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = io_uring_setup(0x3ce8, &(0x7f0000000000)={0x0, 0xc899, 0x10, 0x0, 0x15f}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x0) 06:34:54 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x600) 06:34:55 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80080) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket(0x27, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:55 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = io_uring_setup(0x3b92, &(0x7f0000000000)={0x0, 0xb304, 0x10, 0x1, 0x173}) r1 = syz_io_uring_setup(0xb6c, &(0x7f0000000180)={0x0, 0xba74, 0x20, 0x3, 0x1ed, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x4c8a, &(0x7f0000000080)={0x0, 0xc545, 0x10, 0x0, 0x2014d, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1d) pipe(&(0x7f0000000380)={0xffffffffffffffff}) syz_open_pts(r2, 0x0) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x700) 06:34:55 executing program 1: prctl$PR_SET_KEEPCAPS(0x18, 0x0) 06:34:55 executing program 0: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x100000) 06:34:55 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/174, 0xae}) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x5bf61) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 06:34:55 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x300) 06:34:55 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x81}, @mss={0x2, 0x20}], 0x7) r0 = getpgid(0xffffffffffffffff) process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/42, 0x2a}], 0x8, &(0x7f0000000580)=[{&(0x7f0000000540)=""/59, 0x3b}], 0x1, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400000) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x900) 06:34:55 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6518, 0x0) 06:34:55 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1010) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:file_context_t:s0\x00', 0x24) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) ioctl$TIOCGPTPEER(r5, 0x5441, 0x10000b8e7) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c091}, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400400) 06:34:55 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c004) socketpair(0x3, 0x1, 0xe73, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x500, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004094}, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:55 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:55 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='/dev/usbmon#\x00', 0x0, r1) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1800) 06:34:55 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x960000) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='/dev/usbmon#\x00', 0x0, r1) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d00) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = fsmount(r0, 0x1, 0xf5) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:55 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x3}, @sack_perm, @mss={0x2, 0x1f}, @window={0x3, 0x2, 0x2}], 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="3393516cf8be127e9076b13d8483a56c", 0x10) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:55 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='/dev/usbmon#\x00', 0x0, r1) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e00) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='>\x00', 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffff, 0x7, 0x7be, 0x4, 0x4, "c4dd17276abbf96ce6ec0d8bef8a15f3ca6a72"}) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) 06:34:55 executing program 2: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x2) 06:34:55 executing program 1: prctl$PR_SET_KEEPCAPS(0x7, 0x0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000000) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) 06:34:55 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d00) 06:34:55 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3000000) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f00) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) 06:34:55 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDDISABIO(r0, 0x4b37) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) write$selinux_attr(r2, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000200)=0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x10001}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4044801) 06:34:55 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x2) 06:34:55 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x10000000) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000000), 0x1ff, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000) 06:34:55 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x739234f603f7dd0b) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:55 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x2) 06:34:55 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e, 0xffffffffffffffff) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, r0) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x5000000) 06:34:55 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:modules_object_t:s0\x00', 0x26) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x1, @local, 0x60ec}}, 0x0, 0x0, 0x3e, 0x0, "a114c22658cbfc4967f7c277acb3d958e1259e4705f915fc54701f5d8dd9e359258f9405b473194fa06be370e2aaec85c2fca8a498750f5c7dbf791bb70966f21c92b51a25662d286d588835b2d348f6"}, 0xd8) 06:34:55 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x2) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4800) 06:34:55 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) r2 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:34:55 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c00) 06:34:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6000000) 06:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0xffffffffffffffff) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x10000000001) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7000000) [ 897.345271][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 897.345282][ T25] audit: type=1400 audit(1621146895.929:140): avc: denied { create } for pid=2058 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modules_object_t:s0 tclass=key permissive=1 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6800) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9000000) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c00) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800009, 0x80010, r0, 0x0) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_free(r1) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x400000a, 0x10, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1fffffffffc) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10000000) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7400) 06:34:56 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, r0) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a00) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10100000) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x210, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 5: times(&(0x7f0000000040)) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9600) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x18000000) 06:34:56 executing program 2: pkey_alloc(0x0, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000005, 0xffffffffffffffff) 06:34:56 executing program 1: socketpair(0xf, 0x4, 0x4, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='-\'}\x00', 0x0, r2) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x36c81) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc000) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d000000) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x4) 06:34:56 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f) 06:34:56 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) geteuid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2c4891bb8f98ad44, 0x110, r1, 0xd80) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e000000) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 0: kexec_load(0x20, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3ffff) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x20000000) 06:34:56 executing program 0: kexec_load(0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}, {&(0x7f00000000c0)="7bdad66a7689153029bea4c2b3d88cbeb715e2e3598fd1a66eb07903c20c8f018fcb281823594c908016631d1eba09c638ae5e35c9057631b674d9eeef691ebb149ec834d0e4efc0dde6e477c0a089d2d9584e3c044b039ab24888a124224ba5eba432dc797662106dc852969a21a2dc428851b64bdb8a4cfeaca2a84330a77cae732d5c7ea1ffb55d60bf37f08a0ee0386151b5d9e7a4dd38", 0x99, 0x3ff, 0x7}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 1: socketpair(0x0, 0x4, 0x4, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0xffffffffffffffff) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000) 06:34:56 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r0) 06:34:56 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in=@loopback}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:56 executing program 1: socketpair(0x0, 0x0, 0x4, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f000000) 06:34:56 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:56 executing program 2: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x5, 0x100, 0x2, 0xfff, 0xb, "fcca80558e8a23a1e21dc6ba035f22bef7ec85"}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="84befb2552f6529f5fb5fa3e", @ANYRES16=0x0, @ANYBLOB="455227bd7000fcdbdf25040000002000018014000400ff01000000000000000000000000000108000600010000000800020003000000080003000400000040000180060001000a00000008000300e0000002050002000100000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe880000000000000000000000000001060005004e240000"], 0x84}}, 0x40880) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) 06:34:56 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x44000) 06:34:56 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000) 06:34:57 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 06:34:57 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x48000000) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80000) 06:34:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x13, 0x0, "aaec8dfeda8b0e7b22957e6562bf6c4ad5f9537443f73bf0179b270c57b6269c63728c21453174823402a9586df623edd2fcd8a5b0b406ee54ed33d33600c89bb085505e7493766c82d2d76b12606b36"}, 0xd8) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r1, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:su_exec_t:s0\x00', 0x73) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @private}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @xdp={0x2c, 0x2, 0x0, 0x5}, @phonet={0x23, 0x7, 0x9, 0xf5}, @llc={0x1a, 0x100, 0x98, 0x81, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x5, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='geneve0\x00', 0x80000001, 0x0, 0x7}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @loopback}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000140}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="bc070000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf2500004100080b01005f29", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000101000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004008000c003020000006d003f40000000008100401f0e0f0000ff03ff1f001000000200250803000000010401050300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004009100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004006015000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="bc0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7bc}, 0x1, 0x0, 0x0, 0x20000041}, 0x804) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d5bab104660570dddf33feff881cf7ee9eab585d11231e5fe6cc736dab47e9acb74e2f6236497e9fd80d9d3ea2d71a597fc81ea8c21599a70f3665bc6656b295fb1eaae8e7c374c1d2467d69c4a5341103979b3eff26d351928da0ca54ff67c6c48be6b17", 0x65, 0x6, 0x3f}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80080) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c000000) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 0: kexec_load(0x0, 0x0, &(0x7f0000000180), 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) [ 898.553309][ T25] audit: type=1400 audit(1621146897.139:141): avc: denied { getopt } for pid=2296 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:su_exec_t:s0 tclass=tcp_socket permissive=1 06:34:57 executing program 2: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:57 executing program 0: kexec_load(0x0, 0x0, &(0x7f0000000180), 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x68000000) 06:34:57 executing program 0: kexec_load(0x0, 0x0, &(0x7f0000000180), 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x100000) [ 898.627250][ T25] audit: type=1400 audit(1621146897.139:142): avc: denied { ioctl } for pid=2296 comm="syz-executor.5" path="socket:[430138]" dev="sockfs" ino=430138 ioctlcmd=0x890c scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:su_exec_t:s0 tclass=tcp_socket permissive=1 06:34:57 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x6, 0x3f}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400000) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c000000) 06:34:57 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) 06:34:57 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = io_uring_setup(0x3a75, &(0x7f0000000200)={0x0, 0x0, 0x2}) io_uring_enter(r1, 0x0, 0x6496, 0x3, &(0x7f0000000140)={[0xffffffff]}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400400) 06:34:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x3f}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0xffffffffffffffff) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x74000000) 06:34:57 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0xffffffffffffffff) 06:34:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 2: r0 = syz_io_uring_setup(0x4728, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) 06:34:57 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x960000) 06:34:57 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a000000) 06:34:57 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:57 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400400) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x519202, 0x0) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80000800) 06:34:58 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc0000000) 06:34:58 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r1, 0x10000000) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xf6ffffff) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000000) 06:34:58 executing program 0: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:apt_lock_t:s0\x00', 0x20) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "0709a0b19a2561b4774cda8a89fb607549a916b501517133ab18a6ca4481d4a168eb01aa5c197b37feb446e514847023fa0e7185a7a5685a08f0187d8183b42942070000000000000091c3e1bb40bc02"}, 0xd8) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) 06:34:58 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x519202, 0x0) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3000000) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfeffffff) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0xffffffffffffffff) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[r0, 0x0]) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:58 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x519202, 0x0) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f0000) 06:34:58 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x519202, 0x0) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x5000000) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, r1) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x2010, r0, 0x10000000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, r3) 06:34:58 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:58 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x519202, 0x0) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffff0300) 06:34:58 executing program 5: fsopen(&(0x7f0000000040)='affs\x00', 0x1) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xffffffff, 0x4) 06:34:58 executing program 0: openat$pidfd(0xffffffffffffff9c, 0x0, 0x519202, 0x0) 06:34:58 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x1010, 0xffffffffffffffff, 0x8000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:v4l_device_t:s0\x00', 0x22) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6000000) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfffffff6) 06:34:58 executing program 0: openat$pidfd(0xffffffffffffff9c, 0x0, 0x519202, 0x0) 06:34:58 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:58 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x8000000) 06:34:58 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7000000) 06:34:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfffffffe) 06:34:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r6 = getpgid(r3) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r2, r2, r1, r2], 0x8, {r4}}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x72, 0x69, 0x44, 0x6, 0x0, 0x4, 0x100, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf8, 0x0, @perf_config_ext={0x9, 0xd969}, 0x220, 0x2, 0x1ff, 0x0, 0x2, 0xd, 0x6f7, 0x0, 0x0, 0x0, 0xffff}, r6, 0x7, 0xffffffffffffffff, 0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 0: openat$pidfd(0xffffffffffffff9c, 0x0, 0x519202, 0x0) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x9000000) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000010, 0x40010, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) 06:34:59 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000000) 06:34:59 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x0) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10000000) 06:34:59 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000000000) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) 06:34:59 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 06:34:59 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:34:59 executing program 2: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x951d2ec6cb7556ab}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000022) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10100000) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000000000) 06:34:59 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x18000000) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000000000000) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x13, 0x0, "aaec8dfeda8b0e7b22957e6562bf6c4ad5f9537443f73bf0179b270c57b6269c63728c21453174823402a9586df623edd2fcd8a5b0b406ee54ed33d33600c89bb085505e7493766c82d2d76b12606b36"}, 0xd8) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r1, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:su_exec_t:s0\x00', 0x73) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @private}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @xdp={0x2c, 0x2, 0x0, 0x5}, @phonet={0x23, 0x7, 0x9, 0xf5}, @llc={0x1a, 0x100, 0x98, 0x81, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x5, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='geneve0\x00', 0x80000001, 0x0, 0x7}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @loopback}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000140}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="bc070000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf2500004100080b01005f29", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000101000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004008000c003020000006d003f40000000008100401f0e0f0000ff03ff1f001000000200250803000000010401050300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004009100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004006015000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="bc0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x7bc}, 0x1, 0x0, 0x0, 0x20000041}, 0x804) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d000000) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10000000000000) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') setns(r0, 0x80) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket(0x1, 0x5, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x7fff, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000080), 0x1) write$selinux_attr(r1, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e000000) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000000000) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r0) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, 0xfffffffffffffffc) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 06:34:59 executing program 2: setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0xea60}}, &(0x7f0000000140)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008011) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) fspick(r2, &(0x7f0000000180)='./file0\x00', 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40040000000000) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x20000000) 06:34:59 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005, 0xffffffffffffffff) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:34:59 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = fsmount(r0, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)=""/102400, &(0x7f0000000080)=0x19000) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f000000) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x96000000000000) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:34:59 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:34:59 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, r0) pkey_free(0xffffffffffffffff) pkey_free(r0) pkey_free(0xffffffffffffffff) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000) 06:34:59 executing program 0: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:34:59 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:59 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x15, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048004}, 0x20000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0xd0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) write$selinux_attr(r3, 0x0, 0xfffffffffffffefc) prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair(0x1d, 0x80000, 0x1, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x54}, 0x800) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x100000000000000) 06:34:59 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:34:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x20010, 0xffffffffffffffff, 0x8000000) 06:34:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x48000000) 06:34:59 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:34:59 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x200000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) r2 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 0: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x3ac22dd72da75c98, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24004844) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x300000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) r2 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x0, @local, 0x3}}, 0x0, 0x0, 0x19, 0x0, "9210be1f4c82ada3f3ed9a17a012f9ddf03a3745e81a9cfdeb3e715aa735989dfa63a1a626b35fb59393590facc6fe14c9121e3cabd5faff44fdcf921964c4719f9a8a6c2330a2d541932620f20e03c4"}, 0xd8) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/160, 0xa0}], 0x2) 06:35:00 executing program 0: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x68000000) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) r2 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 0: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 0: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x500000000000000) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x74000000) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x600000000000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8001, 0x80) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x10eb1d) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 0: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a000000) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x700000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x8, 0x6, 0x7fffffff, 0x3, 0x6, "85871c9e019d5ecbb28e56a2574699e88e6571"}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 0: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x10000000) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x80000800) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x900000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 5: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/157, 0x9d}], 0x3) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='efs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='$\'!{],+-.-^[\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x1, 0x1, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='\x9b\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x10000000) 06:35:00 executing program 0: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc0000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000000000000) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x10000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$usbmon(r1, &(0x7f0000000040)=""/39, 0x27) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 0: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xf6ffffff) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1010000000000000) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x5e8a, &(0x7f00000000c0)={0x0, 0x1d6b, 0x2, 0x2, 0x1d6, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1800000000000000) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfeffffff) 06:35:00 executing program 0: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x20, 0x19, "ce2f278e9662a285"}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000180)=r2, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f00000001c0)={0x1ff, 0x0, 0x80, 0x1ae0, 0x7}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x890) 06:35:00 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f0000) 06:35:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d00000000000000) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:00 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) write$selinux_attr(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x66d8, &(0x7f0000000180)={0x0, 0xa73c, 0x20, 0x1, 0x372}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_setup(0x1bc4, &(0x7f00000000c0)={0x0, 0x59d6, 0x8, 0x2, 0x37d, 0x0, r1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000002c0)='rdma.max\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:01 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x10000000) 06:35:01 executing program 0: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e00000000000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffff0300) 06:35:01 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="325ba83e2b064d5cfc412a78da014e6b", 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) fsmount(r2, 0x0, 0x77) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r3, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0xffffffff, 0x80, 0x3, 0xffffffff, 0x7, "aac520fc2873e8fa5607a7cb62995c4f39a01a"}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 06:35:01 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000e00)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x10000000) 06:35:01 executing program 0: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000000000000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfffffff6) 06:35:01 executing program 0: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_attr(r1, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 06:35:01 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x10000000) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f00000000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x10000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfffffffe) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="728237939ef79c00000000000000034e", 0x10) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000000000000) 06:35:01 executing program 1: pipe(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:01 executing program 2: pipe(0x0) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000000) 06:35:01 executing program 1: pipe(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:01 executing program 2: pipe(0x0) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x8000000000001) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4800000000000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:01 executing program 1: pipe(0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:01 executing program 2: pipe(0x0) r0 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c00000000000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6800000000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c00000000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x36c1, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000000000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7400000000000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x10000000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @multicast2}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000540)={0x8b4, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x800, 0xe4, 0x5, 0x87d}, {0x9363, 0x0, 0x7f, 0x81}, {0x6, 0x4, 0x0, 0x3f}]}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2213}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x41}, 0x4000804) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a00000000000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40000000000000) 06:35:01 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000000000000000) 06:35:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair(0x22, 0x4, 0xffffffff, &(0x7f0000000080)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 06:35:01 executing program 1: pipe(&(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:01 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x40040000000000) 06:35:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:01 executing program 1: pipe(&(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000080000000000) 06:35:02 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$selinux_attr(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 06:35:02 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x4) 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x96000000000000) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e00000000000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc000000000000000) 06:35:02 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x22d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x100000000000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xf6ffffff00000000) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{$+/\x00', 0x0, r1) 06:35:02 executing program 0 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:02 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{$+/\x00', 0x0, r1) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfeffffff00000000) [ 903.681020][ T3184] FAULT_INJECTION: forcing a failure. [ 903.681020][ T3184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.694779][ T3184] CPU: 0 PID: 3184 Comm: syz-executor.0 Not tainted 5.13.0-rc1-syzkaller #0 [ 903.703943][ T3184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.715117][ T3184] Call Trace: [ 903.718861][ T3184] dump_stack+0x137/0x19d [ 903.723642][ T3184] should_fail+0x23c/0x250 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x200000000000000) [ 903.728840][ T3184] should_fail_usercopy+0x16/0x20 [ 903.734389][ T3184] _copy_from_user+0x1c/0xd0 [ 903.739317][ T3184] __copy_msghdr_from_user+0x44/0x350 [ 903.745359][ T3184] ? __fget_light+0x21b/0x260 [ 903.750447][ T3184] __sys_sendmsg+0x135/0x270 [ 903.755144][ T3184] ? kstrtouint_from_user+0x104/0x130 [ 903.760727][ T3184] ? do_anonymous_page+0x411/0x8b0 [ 903.766027][ T3184] ? fsnotify_perm+0x59/0x2e0 [ 903.770986][ T3184] ? __fsnotify_parent+0x32f/0x430 [ 903.776716][ T3184] ? get_pid_task+0x8b/0xc0 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x300000000000000) 06:35:02 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 903.781681][ T3184] ? vfs_write+0x50c/0x770 [ 903.786264][ T3184] ? __fget_light+0x21b/0x260 [ 903.792178][ T3184] ? __cond_resched+0x11/0x40 [ 903.797627][ T3184] ? fput+0x2d/0x130 [ 903.801789][ T3184] ? ksys_write+0x157/0x180 [ 903.807291][ T3184] __x64_sys_sendmsg+0x42/0x50 [ 903.813023][ T3184] do_syscall_64+0x4a/0x90 [ 903.817820][ T3184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.824227][ T3184] RIP: 0033:0x4665d9 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) [ 903.828567][ T3184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.849226][ T3184] RSP: 002b:00007f8aa2fe3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.857746][ T3184] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 903.866049][ T3184] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 903.874116][ T3184] RBP: 00007f8aa2fe31d0 R08: 0000000000000000 R09: 0000000000000000 06:35:02 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{$+/\x00', 0x0, r1) [ 903.882185][ T3184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.890327][ T3184] R13: 00007fff4b63708f R14: 00007f8aa2fe3300 R15: 0000000000022000 06:35:02 executing program 0 (fault-call:1 fault-nth:1): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x400000000000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f000000000000) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:02 executing program 1: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffff030000000000) [ 904.008906][ T3228] FAULT_INJECTION: forcing a failure. [ 904.008906][ T3228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.023374][ T3228] CPU: 0 PID: 3228 Comm: syz-executor.0 Not tainted 5.13.0-rc1-syzkaller #0 [ 904.033147][ T3228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.043915][ T3228] Call Trace: [ 904.047428][ T3228] dump_stack+0x137/0x19d [ 904.051904][ T3228] should_fail+0x23c/0x250 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffffffff00000000) [ 904.056418][ T3228] should_fail_usercopy+0x16/0x20 [ 904.061883][ T3228] _copy_from_user+0x1c/0xd0 [ 904.066565][ T3228] __copy_msghdr_from_user+0x2a5/0x350 [ 904.072227][ T3228] __sys_sendmsg+0x135/0x270 [ 904.077116][ T3228] ? try_to_wake_up+0x38f/0x480 [ 904.083164][ T3228] ? fsnotify_perm+0x59/0x2e0 [ 904.088667][ T3228] ? __fsnotify_parent+0x32f/0x430 [ 904.094883][ T3228] ? get_pid_task+0x8b/0xc0 [ 904.099839][ T3228] ? vfs_write+0x50c/0x770 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x500000000000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffffffffffffffff) [ 904.105159][ T3228] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 904.111358][ T3228] ? __fget_light+0x21b/0x260 [ 904.116672][ T3228] ? __cond_resched+0x11/0x40 [ 904.121674][ T3228] ? fput+0x2d/0x130 [ 904.125853][ T3228] ? ksys_write+0x157/0x180 [ 904.130807][ T3228] __x64_sys_sendmsg+0x42/0x50 [ 904.136157][ T3228] do_syscall_64+0x4a/0x90 [ 904.141206][ T3228] ? irqentry_exit_to_user_mode+0x5/0x20 [ 904.147962][ T3228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 904.154494][ T3228] RIP: 0033:0x4665d9 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x600000000000000) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 904.158581][ T3228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 904.178837][ T3228] RSP: 002b:00007f8aa2fe3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.188137][ T3228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 904.196658][ T3228] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 904.205944][ T3228] RBP: 00007f8aa2fe31d0 R08: 0000000000000000 R09: 0000000000000000 [ 904.214017][ T3228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.223577][ T3228] R13: 00007fff4b63708f R14: 00007f8aa2fe3300 R15: 0000000000022000 06:35:02 executing program 0 (fault-call:1 fault-nth:2): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:02 executing program 1: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:02 executing program 5: pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x700000000000000) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xd4500, 0x0) 06:35:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:02 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @isdn={0x22, 0x4, 0x90, 0x0, 0x9}, @xdp={0x2c, 0x0, r1, 0x11}, @hci={0x1f, 0x4, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x3}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = getpgid(0x0) clone3(&(0x7f0000000440)={0x210000, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), {}, &(0x7f0000000340)=""/129, 0x81, &(0x7f0000000e40)=""/4096, &(0x7f0000000400)=[0x0, r2, 0x0, 0x0], 0x4, {r0}}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x900000000000000) [ 904.335186][ T3268] FAULT_INJECTION: forcing a failure. [ 904.335186][ T3268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.349238][ T3268] CPU: 0 PID: 3268 Comm: syz-executor.0 Not tainted 5.13.0-rc1-syzkaller #0 [ 904.358403][ T3268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.369182][ T3268] Call Trace: [ 904.373086][ T3268] dump_stack+0x137/0x19d [ 904.377806][ T3268] should_fail+0x23c/0x250 06:35:03 executing program 5: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1000000000000000) [ 904.384506][ T3268] should_fail_usercopy+0x16/0x20 [ 904.390456][ T3268] _copy_from_user+0x1c/0xd0 [ 904.395220][ T3268] iovec_from_user+0xc4/0x2d0 [ 904.400110][ T3268] ? should_fail+0xd6/0x250 [ 904.404894][ T3268] __import_iovec+0x49/0x270 [ 904.410205][ T3268] ? __copy_msghdr_from_user+0x232/0x350 [ 904.417521][ T3268] import_iovec+0x69/0x80 [ 904.422326][ T3268] __sys_sendmsg+0x1ab/0x270 [ 904.427404][ T3268] ? do_anonymous_page+0x411/0x8b0 06:35:03 executing program 1: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) [ 904.433258][ T3268] ? fsnotify_perm+0x59/0x2e0 [ 904.438761][ T3268] ? __fsnotify_parent+0x32f/0x430 [ 904.444164][ T3268] ? get_pid_task+0x8b/0xc0 [ 904.449129][ T3268] ? vfs_write+0x50c/0x770 [ 904.453945][ T3268] ? __cond_resched+0x11/0x40 [ 904.458942][ T3268] ? fput+0x2d/0x130 [ 904.463233][ T3268] ? ksys_write+0x157/0x180 [ 904.467861][ T3268] __x64_sys_sendmsg+0x42/0x50 [ 904.472902][ T3268] do_syscall_64+0x4a/0x90 [ 904.477763][ T3268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 904.484276][ T3268] RIP: 0033:0x4665d9 [ 904.489157][ T3268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 904.510994][ T3268] RSP: 002b:00007f8aa2fe3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.519879][ T3268] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 904.528389][ T3268] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 904.537183][ T3268] RBP: 00007f8aa2fe31d0 R08: 0000000000000000 R09: 0000000000000000 [ 904.546073][ T3268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.554515][ T3268] R13: 00007fff4b63708f R14: 00007f8aa2fe3300 R15: 0000000000022000 06:35:03 executing program 0 (fault-call:1 fault-nth:3): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:03 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6700, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 06:35:03 executing program 1: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 5: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1010000000000000) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:03 executing program 5: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 904.678169][ T3313] FAULT_INJECTION: forcing a failure. [ 904.678169][ T3313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.692310][ T3313] CPU: 0 PID: 3313 Comm: syz-executor.0 Not tainted 5.13.0-rc1-syzkaller #0 [ 904.701076][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.711757][ T3313] Call Trace: [ 904.711768][ T3313] dump_stack+0x137/0x19d [ 904.711791][ T3313] should_fail+0x23c/0x250 06:35:03 executing program 1: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x8000000) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 5: pipe(0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) [ 904.724957][ T3313] should_fail_usercopy+0x16/0x20 [ 904.730705][ T3313] _copy_to_user+0x1c/0x90 [ 904.730739][ T3313] simple_read_from_buffer+0xab/0x120 [ 904.730765][ T3313] proc_fail_nth_read+0xf6/0x140 06:35:03 executing program 1: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 904.730785][ T3313] ? rw_verify_area+0x136/0x250 [ 904.730870][ T3313] ? proc_fault_inject_write+0x200/0x200 [ 904.730891][ T3313] vfs_read+0x154/0x5d0 [ 904.730915][ T3313] ? __fget_light+0x21b/0x260 [ 904.730935][ T3313] ? __cond_resched+0x11/0x40 [ 904.730953][ T3313] ksys_read+0xce/0x180 [ 904.730968][ T3313] __x64_sys_read+0x3e/0x50 [ 904.730981][ T3313] do_syscall_64+0x4a/0x90 [ 904.731074][ T3313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 904.731096][ T3313] RIP: 0033:0x41935c [ 904.731111][ T3313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 904.731125][ T3313] RSP: 002b:00007f8aa2fe3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.731140][ T3313] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 904.731150][ T3313] RDX: 000000000000000f RSI: 00007f8aa2fe31e0 RDI: 0000000000000004 06:35:03 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 06:35:03 executing program 5: pipe(0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x8000000) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 1: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1800000000000000) [ 904.731159][ T3313] RBP: 00007f8aa2fe31d0 R08: 0000000000000000 R09: 0000000000000000 [ 904.731168][ T3313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.731177][ T3313] R13: 00007fff4b63708f R14: 00007f8aa2fe3300 R15: 0000000000022000 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1d00000000000000) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 06:35:03 executing program 5: pipe(0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0xffffffffffffffff) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 1: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 3: socket$inet6_icmp(0xa, 0x2, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc6500, 0x0) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1e00000000000000) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 06:35:03 executing program 5: pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:35:03 executing program 1: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x2000000000000000) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 06:35:03 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x29, 0x4, 0x1f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x34}}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000884}, 0x40) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x24000800) 06:35:03 executing program 5: pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:35:03 executing program 2: pipe(&(0x7f0000000000)) r0 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x3f00000000000000) 06:35:03 executing program 1: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:03 executing program 2: pipe(&(0x7f0000000000)) r0 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:03 executing program 5: pipe(&(0x7f0000000e00)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 06:35:03 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x7ffff000}}, 0x0) 06:35:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4000000000000000) 06:35:04 executing program 2: pipe(&(0x7f0000000000)) r0 = io_uring_setup(0x198d, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) 06:35:04 executing program 1: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 3: set_thread_area(&(0x7f0000000000)={0x480fdc20, 0x100000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}) kexec_load(0x8, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="070038a612602fd6", 0x8, 0x0, 0x8001}, {&(0x7f00000000c0)="c40ebcebfa2f2c4b6020f59392766b1e603f2310c5f804d032dcb19298eabb4f6d68c1e55c6b7ee04d25492c5e6a96ce806487e00b24cd94f02ed44f8ebe8d1052cb7ffde5c4da060450f4640a1cb87ad6df1278627e581908cb5421e91bb21e3721c0e3b62426ed1c7dc0a0e54a38d784cd87270a429726788c7fb7439487999e5673a0205bb8bb2cfb591946d6615d5515e43aa2040df4759cd3c324d0a2fc104a96332ae8fdc7891b428dd88aab4ca5ca6f66020b90155aaab81b05255c2b3eab39da70fe6fb4bd1e32", 0xcb, 0x1, 0x1}, {&(0x7f00000001c0)="c699a4908847606dc22b22d4abc1609feb7d5c23d910730cee3adf3e563cab6b7700c154a4df70b2871a46fcba0ffa998f4c20bcaab8dd80b48d4115e78120d692e95cff3bab802deebc7a2a045b008dbc76a82d42168f51a4b67aa5dd6bddf1d6802973afbd869772dfa0089e07520889c90feeefd01fab7914cbc16c3de01e66a42abc516a69128ebec24f1d02f0b9538b839f99cb8b6cf3ebea1ca7e27e5c7f73dd79c1049eb45e356ab139f06e7831d5af82b498fbdb5e8dad1daa45b7ff2e9a4922eed8", 0xc6, 0xffffffffffffffc0, 0x2}, {&(0x7f00000002c0)="0b675794a667d8ea5b856d56ccb473535de9b7201ab70395bf37c3b986b5408112f1e717e9bb11a10187e31641e3c0a022a6a8b55328b4c510a0bc4d48ea88bfbcf7b17072c0990e0ca1bf29aa6b91f12fd7e17819f561ef79b88bd58e4068ed917c092dcac8bd6b981d89939f86e88b57123362fb19b70c1f50dc2b451331cc3ce517bb9a6b3a", 0x87, 0x4a6b, 0x4}], 0x30000) set_thread_area(&(0x7f0000000040)={0x0, 0x20001000, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x1}) 06:35:04 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x7ffffffff000}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4800000000000000) 06:35:04 executing program 2: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 1: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000007020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x4c00000000000000) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x8}, 0x0) 06:35:04 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) ioctl$KDENABIO(r0, 0x4b36) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:04 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x300}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6800000000000000) 06:35:04 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0x6ab9, 0x2, 0x9, 0x1b, "e21423e737fae44d9e051c11f454f1eed09db7"}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x4) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffff7f}, 0x0) 06:35:04 executing program 5: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x6c00000000000000) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 3: times(&(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @private}, &(0x7f0000000240)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r0, r1], 0x2) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='!((}$%\x00', &(0x7f0000000100)="554492c4db746eba456d66b5af8d56706487e5be36287c44c8547f0819364ad12b6afd12f1ae8a216aab757e281f5cdc08fec6c1ae1ed3605e91bb76fde05f8c4da95fb1c50dc49a80cc4c8761ce682669acce600ae9558d3cb3fc7bf7c3b8901a19b5", 0x63) 06:35:04 executing program 5: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 2: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 5: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7400000000000000) 06:35:04 executing program 2: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 06:35:04 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 06:35:04 executing program 5: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x7a00000000000000) 06:35:04 executing program 2: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 06:35:04 executing program 5: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x200440e0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 06:35:04 executing program 2: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 06:35:04 executing program 5: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000000000000000) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x4) 06:35:04 executing program 2: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 3: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x9e500, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 06:35:04 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 2: r0 = socket(0x0, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x8000080000000000) 06:35:04 executing program 5: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x1, 0x40, 0x7f, 0x0, 0x20, 0xda880, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffe01, 0x2, @perf_config_ext={0x7f, 0x1}, 0x2c, 0xaa5, 0x35, 0x6, 0x8000, 0x0, 0x2, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x8ae, 0x4fd1, 0x5}) 06:35:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x1010000000000000) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 06:35:04 executing program 2: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xc000000000000000) 06:35:04 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x7) 06:35:04 executing program 5: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xf6ffffff00000000) 06:35:04 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffff7f) 06:35:05 executing program 2: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffff7f00000000) 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) 06:35:05 executing program 5: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xf6ffffff00000000) 06:35:05 executing program 1 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 2: r0 = socket(0xa, 0x0, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x9, 0x7, 0x1000, 0x7fff, 0x8}) [ 906.544002][ T3672] FAULT_INJECTION: forcing a failure. [ 906.544002][ T3672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.558008][ T3672] CPU: 1 PID: 3672 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 906.567250][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.578410][ T3672] Call Trace: [ 906.582352][ T3672] dump_stack+0x137/0x19d [ 906.587041][ T3672] should_fail+0x23c/0x250 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x440040, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) [ 906.592287][ T3672] should_fail_usercopy+0x16/0x20 [ 906.597416][ T3672] _copy_from_user+0x1c/0xd0 [ 906.602394][ T3672] __copy_msghdr_from_user+0x44/0x350 [ 906.607786][ T3672] ? __fget_light+0x21b/0x260 [ 906.612597][ T3672] __sys_sendmsg+0x135/0x270 [ 906.617380][ T3672] ? kstrtouint_from_user+0x104/0x130 [ 906.622956][ T3672] ? do_anonymous_page+0x411/0x8b0 [ 906.628415][ T3672] ? fsnotify_perm+0x59/0x2e0 [ 906.633290][ T3672] ? __fsnotify_parent+0x32f/0x430 [ 906.638908][ T3672] ? get_pid_task+0x8b/0xc0 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xfeffffff00000000) 06:35:05 executing program 5: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 906.643598][ T3672] ? vfs_write+0x50c/0x770 [ 906.648033][ T3672] ? __fget_light+0x21b/0x260 [ 906.653172][ T3672] ? __cond_resched+0x11/0x40 [ 906.658137][ T3672] ? fput+0x2d/0x130 [ 906.662649][ T3672] ? ksys_write+0x157/0x180 [ 906.667259][ T3672] __x64_sys_sendmsg+0x42/0x50 [ 906.672416][ T3672] do_syscall_64+0x4a/0x90 [ 906.677152][ T3672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 906.683889][ T3672] RIP: 0033:0x4665d9 06:35:05 executing program 3: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x100000000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 06:35:05 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffffff00000000) [ 906.687875][ T3672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.708615][ T3672] RSP: 002b:00007f7b7a2f0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.718261][ T3672] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 906.727009][ T3672] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 906.735274][ T3672] RBP: 00007f7b7a2f01d0 R08: 0000000000000000 R09: 0000000000000000 06:35:05 executing program 5: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 906.743630][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.752221][ T3672] R13: 00007ffcd8a419ff R14: 00007f7b7a2f0300 R15: 0000000000022000 06:35:05 executing program 2: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = fspick(r0, &(0x7f0000000100)='./file0\x00', 0x1) fsmount(r2, 0x0, 0x4c) 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xff0f000000000000) 06:35:05 executing program 1 (fault-call:1 fault-nth:1): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 5: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f00000001c0)={0xffff, 0xb15, 0x3, 0x26, 0x1, "d5f7b8931dfc7250e80485630c7a04fcdc375b"}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xc4, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xbbe3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0xc4}}, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x3, 0xe, 0x1b4, &(0x7f0000000240)}) 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffff030000000000) 06:35:05 executing program 0: r0 = socket(0x25, 0x6, 0x25) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={0x0, 0xfffffffffffffd89}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x5, 0x7, 0xed04, 0x80000001, 0x4, "b30a0cd470ab125ceea28d5bdbf99d4a653445"}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x4, 0x0, 0x34}, @ethernet={0x1, @random="306b11231d28"}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x3, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='ip6tnl0\x00', 0x72, 0x7, 0x90}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @initdev, @dev}, &(0x7f0000000500)=0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/pid_for_children\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000cc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="c00002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c805000045d0425256fd258f08000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0f000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000400003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400c78b00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400a1000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="280202806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400080002081a03000000244901090000000500ffff09000000090007c0bab8ffff0600011f3f0000000200930400280000bbfc040400800000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400b9003f080600000000001f050300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040000feffff08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x728}, 0x1, 0x0, 0x0, 0x24000005}, 0x8001) getsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r1, 0x1) 06:35:05 executing program 2: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 907.029886][ T3741] FAULT_INJECTION: forcing a failure. [ 907.029886][ T3741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.044228][ T3741] CPU: 0 PID: 3741 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 907.053652][ T3741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.064173][ T3741] Call Trace: [ 907.067653][ T3741] dump_stack+0x137/0x19d [ 907.072090][ T3741] should_fail+0x23c/0x250 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x46303, 0x0) 06:35:05 executing program 0: r0 = socket(0xb, 0x5, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}}, 0x0, 0x0, 0x32, 0x0, "d4de869dddb90734a539b2ec64d6c424096f1994264efb9eedb5dba040e3554c428658555043d134c6417e28e9cf9ff03743c4779a31fc3e905cb9bf4a5c8143aa04a69886a47b0ecbf0147687937b7b"}, 0xd8) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffffffff00000000) [ 907.077395][ T3741] should_fail_usercopy+0x16/0x20 [ 907.083050][ T3741] _copy_from_user+0x1c/0xd0 [ 907.088245][ T3741] iovec_from_user+0xc4/0x2d0 [ 907.093395][ T3741] ? should_fail+0xd6/0x250 [ 907.098401][ T3741] __import_iovec+0x49/0x270 [ 907.103351][ T3741] ? __copy_msghdr_from_user+0x232/0x350 [ 907.109476][ T3741] import_iovec+0x69/0x80 [ 907.114055][ T3741] __sys_sendmsg+0x1ab/0x270 [ 907.119259][ T3741] ? kcsan_setup_watchpoint+0x26e/0x470 06:35:05 executing program 5: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 907.125870][ T3741] ? __fsnotify_parent+0x32f/0x430 [ 907.131905][ T3741] ? get_pid_task+0x8b/0xc0 [ 907.136535][ T3741] ? vfs_write+0x50c/0x770 [ 907.140987][ T3741] ? __fget_light+0x21b/0x260 [ 907.146200][ T3741] ? __cond_resched+0x11/0x40 [ 907.151010][ T3741] ? fput+0x2d/0x130 [ 907.156252][ T3741] ? ksys_write+0x157/0x180 [ 907.160854][ T3741] __x64_sys_sendmsg+0x42/0x50 [ 907.166091][ T3741] do_syscall_64+0x4a/0x90 [ 907.171136][ T3741] entry_SYSCALL_64_after_hwframe+0x44/0xae 06:35:05 executing program 2: r0 = socket(0xa, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 907.177382][ T3741] RIP: 0033:0x4665d9 [ 907.181454][ T3741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.202185][ T3741] RSP: 002b:00007f7b7a2f0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.211372][ T3741] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 907.220535][ T3741] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) [ 907.229427][ T3741] RBP: 00007f7b7a2f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.239072][ T3741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.247460][ T3741] R13: 00007ffcd8a419ff R14: 00007f7b7a2f0300 R15: 0000000000022000 06:35:05 executing program 1 (fault-call:1 fault-nth:2): r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0xffffffffffffffff) 06:35:05 executing program 5: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) 06:35:05 executing program 2: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:05 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) syz_io_uring_setup(0x759b, &(0x7f0000000240)={0x0, 0xf7cc, 0x4, 0x2, 0x1fc, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={0x0, 0x1b}, 0x1, 0x0, 0x0, 0x48050}, 0x50) 06:35:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xdfb3, 0xf1b, 0x5, 0xfffffffb}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) [ 907.377109][ T3803] FAULT_INJECTION: forcing a failure. [ 907.377109][ T3803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.392157][ T3803] CPU: 0 PID: 3803 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 907.401191][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.412665][ T3803] Call Trace: [ 907.416045][ T3803] dump_stack+0x137/0x19d [ 907.420522][ T3803] should_fail+0x23c/0x250 06:35:06 executing program 2: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 907.424968][ T3803] should_fail_usercopy+0x16/0x20 [ 907.430562][ T3803] _copy_to_user+0x1c/0x90 [ 907.435231][ T3803] simple_read_from_buffer+0xab/0x120 [ 907.440835][ T3803] proc_fail_nth_read+0xf6/0x140 [ 907.446306][ T3803] ? rw_verify_area+0x136/0x250 [ 907.452001][ T3803] ? proc_fault_inject_write+0x200/0x200 [ 907.458697][ T3803] vfs_read+0x154/0x5d0 [ 907.463206][ T3803] ? __fget_light+0x21b/0x260 [ 907.467984][ T3803] ? __cond_resched+0x11/0x40 [ 907.472765][ T3803] ksys_read+0xce/0x180 06:35:06 executing program 5: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) [ 907.476942][ T3803] __x64_sys_read+0x3e/0x50 [ 907.481557][ T3803] do_syscall_64+0x4a/0x90 [ 907.486478][ T3803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 907.492603][ T3803] RIP: 0033:0x41935c [ 907.496633][ T3803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 907.517150][ T3803] RSP: 002b:00007f7b7a2f0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 06:35:06 executing program 0: r0 = socket(0xa, 0x3, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 3: r0 = socket(0x27, 0xa, 0x6e65) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ac4f438b9d076dd30d114a4e0a0ac345", 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 2: socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) [ 907.525883][ T3803] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 907.535094][ T3803] RDX: 000000000000000f RSI: 00007f7b7a2f01e0 RDI: 0000000000000004 [ 907.543368][ T3803] RBP: 00007f7b7a2f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.551885][ T3803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.560125][ T3803] R13: 00007ffcd8a419ff R14: 00007f7b7a2f0300 R15: 0000000000022000 06:35:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket(0xa, 0x3, 0x5) r3 = syz_io_uring_setup(0x287, &(0x7f0000000240)={0x0, 0x5939, 0x8, 0x2, 0x2b6, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r2, r2, r2, r2, r2], 0x6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 06:35:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 06:35:06 executing program 3: r0 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0, r1, 0xffffffffffffffff, r2]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 0: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x9800}, 0x90) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x5c7501, 0x0) 06:35:06 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x7, 0x7, 0x8}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='\x00', 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7ffff000}}, 0x0) 06:35:06 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400600, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 06:35:06 executing program 4: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7ffffffff000}}, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6502, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 06:35:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0xafd}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_setup(0x3deb, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0xa, 0x0, 0x24, &(0x7f0000000240)}) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x8}, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xe4502, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x5, 0x3, 0x7fff, 0x4, 0xf, "aee2f599e33ca8387dc040d9f2272718e5425b"}) r3 = io_uring_setup(0xa1b, &(0x7f0000000040)={0x0, 0x91fa, 0x8, 0x3, 0x178}) syz_io_uring_setup(0x41be, &(0x7f00000000c0)={0x0, 0x72da, 0x20, 0x1, 0x3ae, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000280)) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000240)={0x4, 0x7ff, 0x100, 0x1, 0x0, "714902f04801d4e9"}) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) io_uring_enter(r4, 0x7c50, 0x5636, 0x3, &(0x7f00000002c0)={[0x1]}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x300}, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44a880, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0xff, 0x1, 0x9, 0x40004, 0x8, "69a55096240b24ad9fd4a657acb0556b0929cd", 0x9, 0xffff}) 06:35:06 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffff7f}, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 06:35:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x98200, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x4, 0x20}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0xac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x4) r4 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x8000000000000000}, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = socket(0x6, 0x1, 0x8) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f00000002c0)=""/34, &(0x7f0000000300)=0x22) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='devices.allow\x00', 0x0, r5) openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\n\x00', 0x0, r2) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x3f9, 0x200, 0x70bd2c, 0x25dfdbfb, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000000c0)={0xffffe000, 0x8, 0x5, 0x0, 0x6}) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 06:35:06 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:06 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) r2 = socket(0x5, 0x3, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000100)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x3) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="7a2473447e1596ef6c5ace651a4bd1b6", 0x10) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:06 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc6740, 0x0) 06:35:06 executing program 2: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 06:35:06 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc6500, 0x0) 06:35:07 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xf6500, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 06:35:07 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) eventfd(0x4) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) 06:35:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x5, 0x6, 0x9, 0x6, 0x9a, "0f9400f32c1b69e0"}) ioctl$KDENABIO(r0, 0x4b36) 06:35:07 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x2}}, @in={0x2, 0x4e21, @private=0xa010100}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x2}}, 0x3, 0x0, 0x0, 0x0, 0x1fc, &(0x7f00000001c0)='ip6erspan0\x00', 0x10000, 0x1000, 0x19}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x2, 0x70bd2c, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}}, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x8000000000000000}, 0x0) 06:35:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsmount(r2, 0x1, 0x6) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0xa, 0x3, 0xa9, &(0x7f0000000240)}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000140)={0xffff, 0x9c46, 0xfff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCNXCL(r3, 0x540d) syz_open_pts(r2, 0x2000) ioctl$TIOCNXCL(r0, 0x540d) syz_open_dev$ttys(0xc, 0x2, 0x1) 06:35:07 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0xf0adced45acf3659, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@access_any}, {@fscache}, {@access_any}, {@version_L}, {@access_user}, {@cachetag={'cachetag', 0x3d, '$'}}, {@access_uid}], [{@fsmagic}, {@obj_role}, {@smackfsroot={'smackfsroot', 0x3d, '))%'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '9p\x00\xd5\x8b\x1b\x8d\xa8L\x11\x99\x16\xbc/pf#oU\x12\x8dC\xe7\x85\xc5\'B\\\x00\x9f2aC\xf5\x0f\x8e\x8a'}}]}}) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000040)) 06:35:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = syz_open_pts(r0, 0x2880) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x8001, 0x8e79, 0x9, 0x0, "9ebc0b6d2a2dc66c6a30788d898d09ebc1fb30", 0x6, 0x1000}) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) 06:35:07 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/104, 0x68}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {0x0, 0x1, r1}, {}, {0x0, 0x1, r2}, {}, {}, {0x0, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x184a2b5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) r4 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 06:35:07 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004881}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 06:35:07 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x58c40, 0x0) pipe(&(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pipe(&(0x7f0000000e00)) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r1 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 0: r0 = socket(0xb, 0x80000, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x74c713ef4ab58ab9}, 0x40000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r3 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x41c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0x6, 0x8}, {0x0, 0x3, 0x8, 0x8}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 06:35:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc2520, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCNXCL(r1, 0x540d) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000000)={0x7, 0x1, 0x2, 0x4, 0xfffffffb}) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r1 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) 06:35:07 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x50d020, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3ff) ioctl$KDENABIO(r4, 0x4b36) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = eventfd(0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[r6, r7]}, 0x2) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) ioctl$TIOCNXCL(r8, 0x540d) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r1 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) 06:35:07 executing program 3: r0 = syz_io_uring_setup(0x38a6, &(0x7f0000000000)={0x0, 0x1ac, 0x8, 0x1, 0x359}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x40010, r0, 0x8000000) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r4, 0xffffffffffffffff], 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x810, r5, 0x10000000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x10, r7, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000025c0), 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) socket$inet(0x2, 0x4, 0xfffffffc) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffff7f) 06:35:07 executing program 0: r0 = getuid() setuid(r0) setuid(r0) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) r1 = socket$inet(0x2, 0x4, 0xfffffffc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f00000007c0)=0xc) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x678882, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x3fd, 0x0, 0x7, 0x8, 0x17, "9578bf7f901f7fc18173c15ba2922435ac17c5"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1332c0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x105080, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="63c06d029433b3333c8b2630f8d9b13c4b5cfc54c236030a89a700ed1fd0dea9efbfe34879d7d832af25680796b82681a44478e32ed24528d0c14b197d6c14f057b3c301aaf5652ff60b5cfa3fe081a241436a9d710d12dea62e350aa38a2db61be5e15eec16518e40bba67e47ed5a051f8e590fd8e9496631cb1ea2e2df8f25113f85d26df45aadfc0d69443a24a1fd5546db3396a8bf4b57782df289afae8bec9f", 0xa2) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x8000000000000000) 06:35:07 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) 06:35:07 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x1, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) socket$inet(0x2, 0x4, 0xfffffffc) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffff7f00000000) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in6=@remote}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 06:35:07 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/153, 0x99) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x16d02, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:07 executing program 0: socket(0x11, 0x5, 0x20012) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0xc000) r1 = fsmount(r0, 0x1, 0x82) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) clock_adjtime(0x2, &(0x7f0000000800)={0x3f, 0x0, 0x180000000, 0x100000000, 0x6, 0x100, 0x5, 0xffffffffffff0001, 0x6, 0x4, 0x9, 0x1ff, 0x3ff, 0x1, 0x1000, 0x1, 0x4, 0x20, 0x7, 0x0, 0x0, 0x4301, 0x7f, 0x6, 0x4, 0x9}) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xffffffff00000000) 06:35:07 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xf3bc3a8d84e8c30a, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:35:07 executing program 5: r0 = socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6d02, 0x0) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:07 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c000) 06:35:07 executing program 3: delete_module(&(0x7f0000000000)=':]\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc6500, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 06:35:07 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) 06:35:07 executing program 5: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:07 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) 06:35:07 executing program 0: r0 = socket(0xa, 0x1, 0x5) r1 = fsmount(0xffffffffffffffff, 0x0, 0x74) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='@--(,@\x00', 0x0, r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x20044080}, 0x24004010) 06:35:07 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x745d83, 0x0) 06:35:08 executing program 5: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:08 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsmount(r1, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1002004, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@appraise}]}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x10, 0xffffffffffffffff, 0x8000000) syz_open_dev$tty20(0xc, 0x4, 0x0) 06:35:08 executing program 1: r0 = socket(0x3, 0x5, 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="74e30026", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf2506000000080002000500000008000300000000000800020004000000080002000400000008000300060000001c000180060005004e2400000500020007000000080006000400000008000300080000000800020006000000040001800800020007000000"], 0x74}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) 06:35:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x80, 0x0, 0x18, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xae3, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8000, 0x1fc00000000000, 0x1ff, 0x4, 0x6, 0x1f, 0x1, 0x0, 0x8, 0x0, 0x10001}, r2, 0x3, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0xe7e, 0x0, &(0x7f0000000040)=[r1, r2, r3, r0, r0, r4, r0, 0xffffffffffffffff, r0]}, 0x9) 06:35:08 executing program 5: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 06:35:08 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x5, 0x17, "c54c353f557be57a"}) 06:35:08 executing program 5: r0 = socket(0x0, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 0: socket(0xa, 0x3, 0x5) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 06:35:08 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4c6702, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) 06:35:08 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:08 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:35:08 executing program 5: r0 = socket(0x0, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x6, 0x8, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) socket(0x1f, 0x80001, 0xf56) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 06:35:08 executing program 2: r0 = socket(0x0, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:08 executing program 5: r0 = socket(0x0, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)=""/101, &(0x7f0000000180)=0x65) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x0, 0x4}, @sack_perm, @timestamp], 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x16401, 0x0) 06:35:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDENABIO(r1, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) 06:35:08 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb4, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) socket(0x9, 0x800, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @remote}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x238}, 0x1, 0x0, 0x0, 0x14000}, 0x4000000) 06:35:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x1c3216f5, 0x3, 0xffff8000, 0x0, "c11b1d673f944f004b32c5535e2a2717151943", 0x1d, 0x949}) 06:35:08 executing program 5: r0 = socket(0xa, 0x0, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 2: r0 = socket(0x0, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 06:35:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$KDENABIO(r1, 0x4b36) ioctl$VT_WAITACTIVE(r0, 0x5607) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:08 executing program 5: r0 = socket(0xa, 0x0, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 2: r0 = socket(0x0, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:08 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 06:35:08 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x42005, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@cache_none}, {@version_9p2000}, {@version_9p2000}], [{@obj_role={'obj_role', 0x3d, '/dev/ttyS3\x00'}}, {@dont_appraise}, {@euid_gt={'euid>', r1}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}, {@permit_directio}, {@smackfsfloor}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyS3\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@measure}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc6741, 0x0) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @private}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @broadcast, @dev}, &(0x7f0000000600)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000640)={0x4c8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x20, 0x1, 0x35, 0x7}, {0x20, 0x2, 0x4, 0x5}, {0x100, 0x2, 0x7f, 0x3}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9c7}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4000811}, 0x10) 06:35:08 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @qipcrtr={0x2a, 0x0, 0x7fff}, @l2={0x1f, 0x12e5, @none, 0x3, 0x1}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='veth0_to_bond\x00', 0x1f, 0x7, 0x7fff}) 06:35:08 executing program 2: r0 = socket(0xa, 0x0, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:08 executing program 5: r0 = socket(0xa, 0x0, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x220f40, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 06:35:08 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x81, 0xfa, 0x1, 0x20, 0x0, 0xfffffffffffffff9, 0xc2800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdcae, 0x1, @perf_config_ext={0x76}, 0x18920, 0x2, 0x1d38, 0x7, 0x9, 0x4, 0x9, 0x0, 0x80, 0x0, 0x800}, r1, 0x9, r2, 0x4) io_uring_setup(0x3c2d, &(0x7f0000000040)={0x0, 0xc99d, 0x4, 0x1, 0x78, 0x0, r0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) syz_io_uring_setup(0x5a00, &(0x7f0000000100)={0x0, 0xd19b, 0x2, 0x2, 0xc0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$TIOCNXCL(r3, 0x540d) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000000c0)) 06:35:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x400, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @sco={0x1f, @none}, @can={0x1d, 0x0}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='macvlan0\x00', 0x0, 0x7f8c, 0xfc00}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @loopback}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)={0x478, r2, 0x608, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x28000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe0}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x49, 0x6, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x25c1}, {0x99, 0x3, 0x7f, 0x8}, {0xfff, 0x8, 0x7, 0x4}]}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4000}, 0x4010000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:08 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc4501, 0x0) 06:35:08 executing program 4: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 06:35:08 executing program 5: r0 = socket(0xa, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 2: r0 = socket(0xa, 0x0, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:08 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x43}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) 06:35:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) times(&(0x7f0000000040)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xa688, 0x3da4, 0x800, 0x1000, 0x8, "b6ea4d549f255d58"}) read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/201, 0xc9) 06:35:08 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000200)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) write$selinux_attr(r2, 0x0, 0xfffffe2c) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x228840, 0x0) getgid() pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000240)={0x3, 0x80, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x280000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6e6f6e652c76657273696f6e3d3970323030302c667363616368652c6163636573733d616e792c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e752c756e616d653d2c63616368653d6d6d61702c7375626a5f757365723d7375626a5f747970652c7375626a5f747970653d59dc6f85bcd90384f1371d179e6afaa84400c0e248bd53ff8360cab052a5c336f7c8ba5e2dcd8ef89db186b1b5b6daccea9da93b3d6d2c5dbb2d038e451c286d8f2c646f6e745f6d6561737572652c00"]) 06:35:08 executing program 5: r0 = socket(0xa, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:08 executing program 1: r0 = socket(0x2b, 0x2, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}}, 0x20040000) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x20000004) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 06:35:08 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:35:08 executing program 2: r0 = socket(0xa, 0x0, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 06:35:09 executing program 5: r0 = socket(0xa, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:09 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) read$usbmon(r0, &(0x7f0000000e40)=""/4096, 0x1000) 06:35:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x711902, 0x0) 06:35:09 executing program 2: r0 = socket(0xa, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:09 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x1}, @nfc={0x27, 0x1, 0x1, 0x1}, @xdp={0x2c, 0x8, 0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0xadf, 0x0, 0x1, 0x0, 0xc7}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback, @initdev}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000580)={0x5ec, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd12c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfe}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0xff, 0x1, 0x1ff}, {0x80, 0x1, 0xff, 0x2}, {0x7ff, 0x6, 0x2, 0x7ff}, {0x8, 0x7, 0x8, 0x4}, {0x76f1, 0x3, 0x40, 0x3f}, {0x0, 0x0, 0xf2, 0x5bf0}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x22, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc246}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x40080}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 06:35:09 executing program 1: socket(0xa, 0x3, 0x5) 06:35:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3ea541, 0x0) 06:35:09 executing program 5: socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:09 executing program 4: nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xfe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250200000008000100000000000ced020007000000000000000c00078008000100", @ANYRES32=r1, @ANYRESOCT=r3], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x80) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 06:35:09 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @qipcrtr={0x2a, 0xffffffff00000003, 0xfffffffe}, @ethernet={0x306, @multicast}, @ipx={0x4, 0x1, 0xfff, "b13a51287a55", 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='xfrm0\x00', 0x81d5, 0xfffffffffffffffd, 0xfebc}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='nomand\x00', 0x0, 0x0) 06:35:09 executing program 2: r0 = socket(0xa, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:09 executing program 1: r0 = socket(0x27, 0x5, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:09 executing program 5: socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:10 executing program 3: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = syz_open_pts(r0, 0x200000) syz_open_pts(r1, 0x0) 06:35:10 executing program 5: socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) 06:35:10 executing program 2: r0 = socket(0xa, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 06:35:10 executing program 0: socket(0xa, 0x3, 0x5) 06:35:10 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 06:35:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) 06:35:10 executing program 0: r0 = socket(0x21, 0x3, 0x5) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xfffffffffffffffc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:10 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x8, 0xffffffff, 0x45c, 0x8, 0x2, "7e5d2c3e3ca8d329ce1083e87ca27cf9f35d28", 0x7, 0x81}) 06:35:10 executing program 5: r0 = socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 06:35:10 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(0x0, r0) 06:35:10 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 06:35:10 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x1c7500, 0x0) 06:35:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18f181, 0x0) 06:35:10 executing program 5: r0 = socket(0xa, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 06:35:10 executing program 0: r0 = socket(0xa, 0x3, 0x5) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x12, 0xffffffffffffffff, 0xf87a) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x10) 06:35:10 executing program 1: getitimer(0x1, &(0x7f0000000000)) getitimer(0x1, &(0x7f0000000040)) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:10 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(0x0, r0) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) 06:35:10 executing program 3: r0 = socket(0x1e, 0x800, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40026000}, 0x44044) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="99d78b05128d1ace159a9fa5eeb9b424", 0x10) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 06:35:10 executing program 2: r0 = socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(0x0, r0) 06:35:10 executing program 0: r0 = socket(0xa, 0xa, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$KDDISABIO(r2, 0x4b37) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) modify_ldt$read(0x0, &(0x7f0000000e40)=""/4096, 0x1000) r4 = io_uring_setup(0x7a68, &(0x7f0000000140)={0x0, 0xb46e, 0x0, 0x0, 0x9c}) r5 = syz_open_pts(r1, 0x284002) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[r5], 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000100)=0x1) 06:35:10 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) r1 = socket(0xa, 0x3, 0x5) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x14, 0x0, 0x14e, &(0x7f0000000100)}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfffffffffffffe97}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) 06:35:10 executing program 2: socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:10 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) modify_ldt$read(0x0, &(0x7f0000000180)=""/33, 0x21) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast1}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4d8, 0x0, 0x400, 0x70bd2c, 0x7, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r0}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 06:35:10 executing program 3: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000380)={0x7, 0x3, 0x80000001, 0x10000, 0x19, "56a921604340e9ed3320a63b831e97d71c75c9"}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x3, 0x9, 0x7, 0x8001, 0x4, "6f3cd08d234fc3a3030000004fb4e97ce63056", 0x7, 0xffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$KDDISABIO(r5, 0x4b37) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r6, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1ff, 0x7}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x50}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) 06:35:10 executing program 1: r0 = socket(0xa, 0x3, 0x5) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\\:\x00', 0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:10 executing program 2: socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:10 executing program 0: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x4080) 06:35:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 06:35:10 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x312020, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@msize={'msize', 0x3d, 0x6}}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x65, 0x31, 0x30, 0x37, 0x34, 0x38], 0x2d, [0x66, 0x33, 0x34, 0x36], 0x2d, [0x30, 0x36, 0x35, 0x35], 0x2d, [0x64, 0x35, 0x60, 0x36], 0x2d, [0x65, 0x61, 0x66, 0x31, 0x32, 0x63, 0x61, 0x39]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ttyS3\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x39}}]}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc6500, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r3 = io_uring_setup(0x5008, &(0x7f0000000200)={0x0, 0x6c0c, 0x20, 0x2, 0x39b, 0x0, r0}) r4 = eventfd(0x800) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000280)=r4, 0x1) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 06:35:10 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) 06:35:10 executing program 0: r0 = socket(0xb, 0x6, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:10 executing program 2: socket(0xa, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 06:35:10 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x50}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xac}}, 0x20000006) 06:35:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xe4500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x601, 0x70bd2c, 0x25dfdbfc, {0x7, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20084081}, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 06:35:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDENABIO(r1, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) 06:35:10 executing program 0: r0 = socket(0x1f, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x85) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) 06:35:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14b401, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000580)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x6, 0x2, 0x70, &(0x7f0000000080)}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = openat$cgroup_type(r1, &(0x7f0000000540), 0x2, 0x0) r6 = getuid() setuid(r6) r7 = getuid() mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x3000020, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fscache,noextend,fsmagic=0x0000000000000009,fowner=', @ANYRESDEC=r6, @ANYBLOB="2c6d61736b3d5e4d0059d8415050f9aef5ff70ed094bafe85cea51f46b49dbb19868984782719c0c2f0fdebcc1c1fd208491ad32cd302faea26987936337c3794d5bcd6c4ad94e3bc6595c9e2f5a1b6fa3a1076115556f842416634df833a0da0d5f985bcaecf42d5724869e552d245f3254fec904", @ANYRESDEC=r7, @ANYBLOB=',\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000640)) 06:35:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 06:35:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDENABIO(r1, 0x4b36) socket$nl_generic(0x10, 0x3, 0x10) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x8000000) 06:35:10 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}, {@access_client}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/ttyS3\x00'}}]}}) syz_io_uring_setup(0x48b3, &(0x7f0000000140)={0x0, 0x6571, 0x1, 0x0, 0x2f9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:10 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040844) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x2000c841) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0xe31, 0x5, 0x4, 0x5, 0xa, "1686f4797041425da9feaa3f15740b1ca58763"}) 06:35:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14b401, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000580)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x6, 0x2, 0x70, &(0x7f0000000080)}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = openat$cgroup_type(r1, &(0x7f0000000540), 0x2, 0x0) r6 = getuid() setuid(r6) r7 = getuid() mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x3000020, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fscache,noextend,fsmagic=0x0000000000000009,fowner=', @ANYRESDEC=r6, @ANYBLOB="2c6d61736b3d5e4d0059d8415050f9aef5ff70ed094bafe85cea51f46b49dbb19868984782719c0c2f0fdebcc1c1fd208491ad32cd302faea26987936337c3794d5bcd6c4ad94e3bc6595c9e2f5a1b6fa3a1076115556f842416634df833a0da0d5f985bcaecf42d5724869e552d245f3254fec904", @ANYRESDEC=r7, @ANYBLOB=',\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000640)) 06:35:10 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x53bd02, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:35:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 06:35:10 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100), 0x1) r2 = socket(0x15, 0x80000, 0x91) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2382, 0x0) syz_open_pts(r7, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa86}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8801) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) ioctl$TIOCNXCL(r0, 0x540d) 06:35:10 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @local}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @initdev, @broadcast}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000007c0)={0x0, @hci={0x1f, 0x3, 0x1}, @can={0x1d, 0x0}, @ethernet={0x1, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xbe15, &(0x7f0000000780)='macvlan1\x00', 0x7, 0x1000, 0x9}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000cc}, 0x20028084) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000000), 0xc, &(0x7f0000000d80)={&(0x7f0000001a80)=ANY=[@ANYBLOB="38050000", @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYBLOB="b844311471706249793eacf190cf9092ed9cdfb70a238689cf7afdd645b5eb0f58d08f0192ad4eb1410fc42fdc8dab6cca31a24e6f6db1adc50cd17a4383addb260e0ad36c260f301893", @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fbffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fda9e73408000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES64, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040034000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000104000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001f00000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006ce25f737461740eab092966726573685f696e746505000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r6, @ANYBLOB="3401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100010040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004003704000008000600", @ANYRES64, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100010040000100240001007072696f72697479000000000000000000000000000000000000000000050003000e00000008000400090000000850d5dc081b854d9099000600", @ANYRES32=r7, @ANYBLOB], 0x538}, 0x1, 0x0, 0x0, 0x4895}, 0x0) 06:35:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:10 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x14b401, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000580)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x6, 0x2, 0x70, &(0x7f0000000080)}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = openat$cgroup_type(r1, &(0x7f0000000540), 0x2, 0x0) r6 = getuid() setuid(r6) r7 = getuid() mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x3000020, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fscache,noextend,fsmagic=0x0000000000000009,fowner=', @ANYRESDEC=r6, @ANYBLOB="2c6d61736b3d5e4d0059d8415050f9aef5ff70ed094bafe85cea51f46b49dbb19868984782719c0c2f0fdebcc1c1fd208491ad32cd302faea26987936337c3794d5bcd6c4ad94e3bc6595c9e2f5a1b6fa3a1076115556f842416634df833a0da0d5f985bcaecf42d5724869e552d245f3254fec904", @ANYRESDEC=r7, @ANYBLOB=',\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000640)) 06:35:11 executing program 3: clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) setitimer(0x1, &(0x7f0000000440)={{0x77359400}, {r0, r1/1000+10000}}, &(0x7f0000000480)) kexec_load(0xeb, 0x5, &(0x7f0000000340)=[{&(0x7f0000000000)="e97d38d13354790e56be379ab2a36dbf7782a514196a96534fce9e45f50d218fd57845a401118a1cfe89ccb51ef22634cace30af01aa14382069966753b7141b878f06dbbfbdc7d98c03a8f81cc1974d6b09860fee0921dd730ffec0ff100fa0dc301bbaf8eee12c8b9f937e41fd9b47867d5294ae562586f9e208a64e6c576979e325b554e27639ce9baabd844a0feb0e00ee3de97ba46974a4ed41c399953478315ff40e1bbafe62c28027a28df8aaea386e6528c70604ebdf96e1c2", 0xbd, 0x5, 0x3}, {&(0x7f00000000c0)="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", 0xfe, 0x35c95412, 0x2}, {&(0x7f0000000240)="cc80425809c23a8e1a5893ac6a088a72fc2a052ca98f567e6d73bb29b9dbd15479e241ca991deac180b6dba6eacf3899f17ac2463efe8b6279eb335136cae02ff2978f32554b7f9d6c85af32a2d066f6689c5a67149e84d08a02271e725d1200bcac57dc8ea738928b0cbf3e6df1aa4827e662a1f3310a057313f00fc0c92ab0356167438c9c9ec87869fe3083b4ddcaf86f1be6267c25d189f29b67eb180e49fece3744f7a6f93939b26b273bae568d7769eb35fd23309ca49f2e6e1c82", 0xbe, 0x0, 0x6}, {&(0x7f00000001c0)="4a58c8af2e0e31d19c4746c54d3d34c424374ad9dd4f0a2978", 0x19, 0x9, 0x7fffffff}, {&(0x7f0000000300)="623203b6aee90556d24c587336", 0xd, 0x8000, 0x200}], 0xa0000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) clone3(&(0x7f00000006c0)={0x108000100, &(0x7f0000000500)=0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580), {0x4}, &(0x7f00000005c0)=""/180, 0xb4, &(0x7f0000000e40)=""/4096, &(0x7f0000000680)=[0x0], 0x1, {r2}}, 0x58) r5 = openat$cgroup(r2, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000780)=[r4, r5, r6]}, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:11 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 06:35:11 executing program 0: r0 = socket(0x23, 0x2, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) io_uring_setup(0x1ade, &(0x7f00000002c0)={0x0, 0xe20b, 0x4, 0x1, 0x2e0}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c47b52d", @ANYRES16=0x0, @ANYBLOB="8846f77dc0d63deee19ef486e58ffe25e273b0a220316b562dbe21987b4b08ce17dbf7a40e2b32a20e695334a0bbbf08b338a7df5295e972a0a858489c4201f27a876ece9694cb777e6b1c9ad481572f533942cb4cdf248e7e24b28535c939219e660850cd5e21b9a967585ac9e08b30", @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080008b6", @ANYRES32=r3, @ANYBLOB="0800db00", @ANYRES32=r4, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008004) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x1) pipe(&(0x7f0000000040)) 06:35:11 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xce500, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x8000000) 06:35:11 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) pipe(&(0x7f0000000100)) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) socket(0x27, 0x800, 0x0) 06:35:11 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x1000, 0x8, 0x9, 0x41, 0x12, "001700"}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x3, 0x223, 0xf5b6, 0x9, 0x10, "951ed254aeb0daf7"}) 06:35:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x8000000) 06:35:11 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 5: pipe(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:11 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 06:35:11 executing program 0: r0 = socket(0xa, 0x3, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0xfffff1ae, 0x8611, 0x10000, 0x2, 0x12, "eeb21c973f62601d4e02963c7e27b63a0ff130"}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 06:35:11 executing program 1: r0 = socket(0x11, 0x1, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:11 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[r1, 0xffffffffffffffff]}, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:11 executing program 5: pipe(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 3: io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xb) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 06:35:11 executing program 5: pipe(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:11 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x2400) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:11 executing program 0: pipe(&(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = io_uring_setup(0x3a75, &(0x7f0000000200)={0x0, 0x0, 0x2}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) clone3(&(0x7f0000000300)={0x95000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) io_uring_enter(r1, 0x0, 0x6496, 0x3, 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) r2 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:11 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) clone3(&(0x7f0000000300)={0x400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3e}, &(0x7f0000000100)=""/154, 0x9a, &(0x7f0000000240)=""/167, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8}, 0x58) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) syz_open_pts(r7, 0x800) 06:35:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 06:35:11 executing program 1: r0 = socket(0xa, 0x3, 0x5) clone3(&(0x7f0000000580)={0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0, {0xd}, &(0x7f0000000480)=""/123, 0x7b, &(0x7f0000000500)=""/51, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4, {r0}}, 0x58) r2 = clone3(&(0x7f0000000800)={0x0, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x20}, &(0x7f00000006c0)=""/188, 0xbc, &(0x7f0000000780)=""/40, &(0x7f00000007c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) clone3(&(0x7f00000008c0)={0x120000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x7}, &(0x7f0000000280)=""/80, 0x50, &(0x7f0000000300)=""/165, &(0x7f0000000880)=[r1, r2, 0x0], 0x3}, 0x58) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 06:35:11 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r1, 0x1) syz_open_pts(r3, 0x101000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000080)=[r2], 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)=',\x00', 0x0, 0xffffffffffffffff) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) 06:35:11 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) socket(0xa, 0x3, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:11 executing program 4: clock_getres(0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 06:35:12 executing program 0: r0 = socket(0x26, 0x5, 0x3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x3, 0x2, 0x7fff, 0x1, 0x6, "3e343664c46fe9b9c3319fc42ad5232b0031d7", 0x0, 0x60}) 06:35:12 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18092900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008054}, 0x14044840) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x10, r0, 0x8000000) 06:35:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) 06:35:12 executing program 1: r0 = socket(0x8, 0x3, 0x5) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @llc={0x1a, 0x0, 0x29, 0x3, 0xff, 0x81, @broadcast}, @isdn={0x22, 0x74, 0xe4, 0x3, 0x17}, @isdn={0x22, 0x6, 0x1f, 0x1}, 0xff, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000000)='syz_tun\x00', 0x401, 0x9b, 0x5}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x78) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r1, 0x1) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x10, r0, 0x8000000) 06:35:12 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = syz_io_uring_setup(0x2d4c, &(0x7f0000000000)={0x0, 0xae11, 0x0, 0x2, 0x2b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r0, 0x10000000) 06:35:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x15, 0x24, &(0x7f0000000240)}) 06:35:12 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x88}}, 0x20004881) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x10, r0, 0x8000000) 06:35:12 executing program 2: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:12 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) pipe(&(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 06:35:12 executing program 2: pipe(&(0x7f0000000e00)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\\[\xeb\x00', 0x0, r1) fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:12 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x70) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22c01, 0x0) ioctl$KDENABIO(r0, 0x4b36) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) syz_io_uring_setup(0x352d, &(0x7f0000000100)={0x0, 0xecfe, 0x0, 0x2, 0x150, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) 06:35:12 executing program 1: r0 = socket(0xa, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000131}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x48810) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 5: pipe(&(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, 0xffffffffffffffff, 0x8000000) 06:35:12 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) 06:35:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) [ 914.166170][ T5026] ================================================================== [ 914.174471][ T5026] BUG: KCSAN: data-race in handle_irq_event / synchronize_irq [ 914.182638][ T5026] [ 914.185050][ T5026] write to 0xffff8881000ea600 of 4 bytes by interrupt on cpu 0: [ 914.193996][ T5026] handle_irq_event+0x12a/0x160 [ 914.198916][ T5026] handle_edge_irq+0x17e/0x600 [ 914.203923][ T5026] __common_interrupt+0x38/0xb0 [ 914.209145][ T5026] common_interrupt+0x73/0x90 [ 914.214617][ T5026] asm_common_interrupt+0x1e/0x40 [ 914.219652][ T5026] ext4_map_blocks+0x0/0xef0 [ 914.224262][ T5026] ext4_getblk+0xb1/0x3d0 [ 914.229356][ T5026] ext4_bread_batch+0x60/0x3e0 [ 914.234255][ T5026] __ext4_find_entry+0xa76/0x1160 [ 914.239586][ T5026] ext4_rmdir+0x113/0x740 [ 914.244199][ T5026] vfs_rmdir+0x13b/0x2c0 [ 914.248655][ T5026] do_rmdir+0x14a/0x2e0 [ 914.252998][ T5026] __x64_sys_rmdir+0x2c/0x30 [ 914.257855][ T5026] do_syscall_64+0x4a/0x90 06:35:12 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x7ff, 0x8, 0x1}) read$usbmon(r0, &(0x7f0000000000)=""/148, 0x94) 06:35:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) syz_open_pts(r7, 0x800) 06:35:12 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) 06:35:12 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xf4c873d9c13bdc02}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:12 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:12 executing program 1: r0 = socket(0xa, 0x4, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffffffffffcbf}, 0x1, 0x0, 0x0, 0x24049004}, 0x810) [ 914.262540][ T5026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 914.268885][ T5026] [ 914.271219][ T5026] read to 0xffff8881000ea600 of 4 bytes by task 5026 on cpu 1: [ 914.278947][ T5026] synchronize_irq+0xa6/0x2e0 [ 914.283724][ T5026] serial8250_do_shutdown+0xc5/0x540 [ 914.289280][ T5026] serial8250_shutdown+0x37/0x40 [ 914.294467][ T5026] uart_tty_port_shutdown+0xd6/0x1d0 [ 914.300368][ T5026] tty_port_close+0x166/0x210 [ 914.305079][ T5026] uart_close+0x4c/0x110 [ 914.309322][ T5026] tty_release+0x255/0xa10 [ 914.313764][ T5026] __fput+0x25b/0x4e0 [ 914.313782][ T5026] ____fput+0x11/0x20 [ 914.313795][ T5026] task_work_run+0xae/0x130 [ 914.313809][ T5026] exit_to_user_mode_prepare+0x156/0x190 [ 914.313830][ T5026] syscall_exit_to_user_mode+0x20/0x40 [ 914.313855][ T5026] do_syscall_64+0x56/0x90 [ 914.313874][ T5026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 914.313897][ T5026] [ 914.313899][ T5026] Reported by Kernel Concurrency Sanitizer on: 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) [ 914.313906][ T5026] CPU: 1 PID: 5026 Comm: syz-executor.4 Not tainted 5.13.0-rc1-syzkaller #0 [ 914.369391][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.380412][ T5026] ================================================================== 06:35:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 06:35:13 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) ioctl$TIOCCBRK(r2, 0x5428) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) syz_open_pts(r7, 0x800) 06:35:13 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r0, 0x2000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) socket$inet6(0xa, 0x4, 0xb0e6) syz_open_pts(r2, 0xc00) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 06:35:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6ea082, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) syz_open_pts(r7, 0x800) 06:35:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) 06:35:13 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) setns(r1, 0x10000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:13 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @loopback}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x0, 0x0, 0x21}, @in={0x2, 0x4e20, @remote}, @l2={0x1f, 0x1, @any, 0x6, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='erspan0\x00', 0x80, 0x8, 0x4ecb}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x25c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0x1, 0x40, 0x2}, {0x1f, 0x80, 0xf7, 0x1}, {0xef00, 0x1, 0x0, 0x1}, {0x80, 0x8, 0x1f, 0x8}, {0x200, 0x4, 0x3, 0xefad}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000015}, 0x20000080) 06:35:13 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @dev}, &(0x7f00000003c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x47c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x6, 0x40, 0x20}, {0x8, 0x4, 0x8, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x1, 0x3, 0x9}, {0x1f, 0x20, 0x6, 0x8000}]}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x0, 0x3, 0x3}, {0x4, 0xa7, 0x1, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 06:35:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) syz_open_pts(r0, 0x16d900) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)=']\x00', 0x0, r3) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) pipe(&(0x7f0000000e00)) 06:35:13 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0xfffffffc, 0x8, 0x6, 0x191, &(0x7f0000000240)}) 06:35:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x2, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 06:35:13 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:13 executing program 0: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf25020000000800020007007b00080003000400000008000200030000000c0001800800070011ea6a2c4524e46cdda71f75c06af806fd47966d2d0499bd61d3e486f85d4ea035500c264363a13b5ffb6b0e866997043c94220896153ff57d0f8aaa73b544143afd2357801d23", @ANYRES32=0x0, @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x850}, 0x4048000) r2 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000500)="06f65b2bbb917b434833b2523cccedd9", 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x181}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4002001}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) 06:35:13 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r1, r5, r6], 0x5) 06:35:13 executing program 4: socketpair(0xf, 0x2, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0xc000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:13 executing program 1: r0 = socket(0x18, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x49, 0x0, "fdc15798374e5d35f254a0c0f674adc55e2fa5d9921f7db90b9f923e0c47a8f17c2f9b3f4abb5308435e8e4bdabf8195538a8bb3dd7512285e69bd7edabd9e4e0a80e205e9b754ac9868f15df71eb7b6"}, 0xd8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1c, 0x0, "175698b1628b6dbbb163927c76835742af72caede66531a79a5b34ca62451cc527153d64b7545dd7f604983567b474f2b0cc81a2764c2ca5f29f1ef0bb4be3ff140c7fb0d3f289cb0b19a97e4de4520f"}, 0xd8) 06:35:13 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000240)=0xffff8004, 0x4) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/190, 0xbe}) r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2, 0x10c00) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xebc9) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00') setns(r5, 0x20000000) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, r3, 0x10000000) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3ded552a018d5266695d598a3d55bb7fb66ad12b8a85b30c66fa87ae22c1b3ab61c3e8bd4f4474c6d504b12b3dcba70930bac5dd11270c91de9095e0c62406915b52099412f8e6d15de2da68fbcaf94e7ef3dd5c79c767a5baee005c30f356529868eaeca48f777bcd889e586d80fc9618c9c25ef3e3800016b07152c123b83810597260d06bffc85a85915a4554f0af4a069329f15b47be54bb782eff1300b54159cbc33852963fe36ccdea83f9e0643334e8fd1576070a409a51e593f74f3c9a0f61c2d8e2938a9fe74f93492671dd95397c726e22eac0a079c8382a1ec4191e42eaea77562b4b62684cb7a6e1d9b914c06b53604c37008dd8c940b4b6f52cc55648a895bd24ce6620014508000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscache,version=9p2000.u,access=any,cachetag=/dev/usbmon#\x00,cache=loose,cache=fscache,msize=0x0000000000000007,fsmagic=0x0000000000000040,smackfstransmute=!^{,smackfsroot=],rootcontext=user_u,context=user_u,fowner=', @ANYRESDEC=r6, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',\x00']) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) 06:35:13 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6518d) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:13 executing program 1: r0 = socket(0x3f, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 06:35:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000e00)) 06:35:13 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) setuid(0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf8) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000001c0)=']@\\}{{\x00', &(0x7f0000000200)='./file0\x00', r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8410808a}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf25030000000800020008000000040001800800030001000000080003000a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x40000d0) 06:35:13 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x4, 0x16, 0xa, 0x11, &(0x7f0000000240)}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x400, 0xfff, 0x8646, 0x9a92, 0xb, "537b564c5cad3106"}) 06:35:13 executing program 1: r0 = socket(0x4, 0x80000, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x8000, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 06:35:13 executing program 1: socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r6 = getpgid(r3) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r2, r2, 0x0, r2], 0x8, {r4}}, 0x58) r7 = gettid() clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r10 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r12 = getpgid(r9) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r8, r8, r7, r8], 0x8, {r10}}, 0x58) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) clone3(&(0x7f00000003c0)={0x10000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000e40)=""/4096, 0x1000, &(0x7f0000000200)=""/226, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r8], 0x9, {r13}}, 0x58) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) ioctl$TCSETS2(r14, 0x402c542b, &(0x7f0000000040)={0x1, 0x9, 0xdeb, 0x6, 0x7, "bda05db77ca3da512cdb6ea25526705fae63e3", 0x3, 0x3}) 06:35:13 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) 06:35:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 06:35:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0xffff8001, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:13 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) 06:35:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:14 executing program 4: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x620000, 0x0) 06:35:14 executing program 3: fsopen(&(0x7f0000000040)='pstore\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r0, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000081}, 0x24048092) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) pipe(&(0x7f0000000e00)) 06:35:14 executing program 0: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000380), 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='[!\x00', &(0x7f0000000140)='./file0\x00', r0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x32400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffeffffffff, 0x3}, 0x10028, 0x400000000, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000240)='[!\x00', &(0x7f0000000280)="af00ab172772f44de08f506eb4178082ba59930ed73577863435bd5ff030697b0033cffd7d23ab8b66c563f2cafa0b23c00820b7a5d08ef61fbfbd996246d94abd444a5bc3b1208a38e15d75fc51150a483f6443bbe323003d38aba1601f65c2094ed47deae2434697a4893650465f6d1ef24cf3c2f46245b36f330460", 0x7d) r1 = socket(0xa, 0x3, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={0x0, @can={0x1d, 0x0}, @vsock={0x28, 0x0, 0xffffffff, @host}, @phonet={0x23, 0x3, 0x5, 0x81}, 0x3, 0x0, 0x0, 0x0, 0xfb0, &(0x7f00000006c0)='lo\x00', 0x9, 0x74, 0xfff7}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000007c0)={0x0, @private, @initdev}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000940)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000a40)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a80)={0x0, @multicast1, @private}, &(0x7f0000000ac0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001280)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000b00)={0x718, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x120, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x144}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xe4d, 0x0, 0x1, 0x81}, {0x3, 0x9, 0x8b, 0x6}, {0xd76, 0x3, 0x20, 0x121}, {0x200, 0xff, 0x5, 0x1}, {0x9, 0x3, 0x2, 0x80}, {0x9, 0x6, 0x1f, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x949}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='[!\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=""/60, &(0x7f0000000200)=0x3c) 06:35:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:14 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x60}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x24000810) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0xc000) 06:35:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 06:35:14 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x5) 06:35:14 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x200c8041) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0xe0, 0x7, 0x2, 0xa5, 0x0, 0x10000, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0xac2, 0xdb3a, 0xb142, 0x4, 0x1ff, 0x9, 0x3ff, 0x0, 0x3ff, 0x0, 0x6}, r1, 0x8, r1, 0x1) 06:35:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) 06:35:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0xffff8001, 0x0, 0x6, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:14 executing program 0: r0 = socket(0x1e, 0x80000, 0x2d) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) 06:35:14 executing program 1: r0 = socket(0xa, 0x3, 0x5) socketpair(0x15, 0x80000, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x22, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x110}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:14 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 06:35:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0xffff8001, 0x0, 0x0, "2287ec70984fef8e1371773d60c06d30a72ca1"}) 06:35:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) r7 = socket(0x0, 0x4e41eb0c3f38ff42, 0x9) r8 = fsmount(0xffffffffffffffff, 0xa32322614c0e2bfb, 0x81) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r10, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r11, 0x40045431, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf25050000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c000600010000000000000008000100000000000c0004008a000000000000002400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c00030005000000000000004c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="00000000000000000000000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0c0004000400000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24000000}, 0x40041) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000000)={0x9, 0x9, 0x27a, 0x4, 0x2}) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000100)) 06:35:14 executing program 3: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040040) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:14 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff0d, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) 06:35:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x5) 06:35:14 executing program 1: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x4c}}, 0x4010) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) pipe(&(0x7f0000000e00)) 06:35:14 executing program 4: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x8) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x5) 06:35:14 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 06:35:14 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x410c00, 0x0) 06:35:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x5) 06:35:14 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}}, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x8) r5 = gettid() r6 = clone3(&(0x7f00000002c0)={0x27200, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2e}, &(0x7f0000000100)=""/203, 0xcb, &(0x7f0000000200)=""/90, 0x0}, 0x58) r9 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000ac0)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001480)=ANY=[@ANYBLOB="0c060000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004004804000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff00000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040008000100", @ANYRES32=0x0, @ANYBLOB="240202803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000104000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c61d682eb72"], 0x60c}}, 0xa8012) r12 = getpgid(r8) clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000380), 0x0, &(0x7f0000000400), {}, &(0x7f0000000440)=""/243, 0xf3, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r10, r12, r7, r7, r5, r6], 0x8, {r9}}, 0x58) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x712, 0x4, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x401, 0x31}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x24}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x5a}}]}, 0x70}}, 0x45) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) 06:35:14 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, 0xffffffffffffffff, 0x10000000) r0 = socket(0xa, 0x3, 0x5) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @loopback}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @local}, &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @empty, @dev}, &(0x7f0000000600)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={0x5f8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x0, 0xab, 0x2}]}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x53f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffba}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 06:35:14 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = fsopen(&(0x7f0000000040)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='(@)&\\-++/,^\\{\x00', 0x0, r1) 06:35:14 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:14 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20427ca84c28dcdc86acaaba4f7444a40c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25010000000c0005000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24002091) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240c0040}, 0x80) 06:35:14 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) pipe(&(0x7f0000000e00)) 06:35:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 06:35:15 executing program 1: sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000000)) 06:35:15 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 06:35:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3f7903, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 06:35:15 executing program 1: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDENABIO(r0, 0x4b36) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40885}, 0x4) r1 = socket(0xa, 0x3, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd22, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:15 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6ec481, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x3ff, 0xfd, 0xf0c, 0xfc1, 0xb, "02711b3d5b738a0d"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[r1, r5, r3, r2, r1, 0xffffffffffffffff]}, 0x6) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) 06:35:15 executing program 0: r0 = socket(0x5, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @ax25={0x3, @default, 0x7}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x81}, @ethernet={0x1, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='veth1_to_batadv\x00', 0x7fff, 0x34f99bb9, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200), 0x4) r3 = fsmount(0xffffffffffffffff, 0x0, 0x88) syz_io_uring_setup(0x4eb6, &(0x7f0000000100)={0x0, 0x2210, 0x4, 0x0, 0x301, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 06:35:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e501, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, @l2={0x1f, 0xd8ce, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, @can={0x1d, r3}, 0xfffa, 0x0, 0x0, 0x0, 0x400, 0x0, 0x101, 0x1}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) ioctl$TIOCSCTTY(r4, 0x540e, 0x6) syz_io_uring_setup(0x118, &(0x7f0000000280)={0x0, 0xf232, 0x6, 0x3, 0x87, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000540)) r5 = syz_io_uring_setup(0x4ec5, &(0x7f00000000c0)={0x0, 0x4628, 0x10, 0x1, 0x10a, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1d) 06:35:15 executing program 1: r0 = socket(0xa, 0x3, 0x5) syz_io_uring_setup(0x5a11, &(0x7f0000000100)={0x0, 0x4d34, 0x1, 0x2, 0xb9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 06:35:15 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) 06:35:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) 06:35:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4400c0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDENABIO(r0, 0x4b36) 06:35:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) 06:35:15 executing program 0: r0 = socket(0xa, 0x3, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp\x00', 0x2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @initdev}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x48}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40084}, 0x40811) 06:35:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1b, 0x5, 0x121, &(0x7f0000000040)}) 06:35:15 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6c69c2, 0x0) 06:35:15 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x40804) 06:35:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x6580, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8fb, 0x12800) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x20}) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) pipe(&(0x7f0000000e00)) 06:35:15 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:15 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x488d5}, 0x240080c4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r2 = syz_open_pts(r1, 0x80002) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x4, 0x2c27, 0x5}) 06:35:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7d16400000000000) 06:35:15 executing program 0: r0 = socket(0x4, 0x2, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x2}, 0x4}}, @rc={0x1f, @any, 0x20}, @nl=@unspec, 0x20, 0x0, 0x0, 0x0, 0x99, &(0x7f0000000040)='veth1_to_batadv\x00', 0x5, 0x9, 0x7}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x71) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 06:35:15 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fbdbdf250400000054000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) 06:35:15 executing program 3: r0 = io_uring_setup(0x6bdc, &(0x7f0000000000)={0x0, 0xdabe, 0x8, 0x2, 0x20e}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:15 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) syz_open_pts(r1, 0x80002) 06:35:15 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc6500, 0x0) 06:35:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_pts(r0, 0x40000) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x5, 0x4, 0x10, 0x0, 0x7, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0x9}, 0x10002, 0x77, 0x0, 0x4, 0xd417, 0x9, 0x3ff, 0x0, 0x1}, r3, 0x6, r1, 0xa) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:15 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2044194}, 0x0) 06:35:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1c7d00, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 06:35:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 4: socketpair(0x27, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x34, 0x0, "882452924d2e98bcb18b558b96e8bf98a7b75221f8487d6c3e6026bbd99bd3c7385de352cb2a172b913e9c2a4b9348cf226b8563532bc5d57b45f7489819eca34437d1d70d24b5eec1a431167c83c678"}, 0xd8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:15 executing program 1: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) io_uring_setup(0x7c91, &(0x7f00000000c0)={0x0, 0x93a, 0x2, 0x1, 0x1ba}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:15 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) 06:35:15 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80) ioctl$TIOCGPTPEER(r0, 0x5441, 0xd4d) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:16 executing program 1: pkey_free(0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:16 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc6100, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) socket(0x8, 0x800, 0x3) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @ethernet={0x306, @link_local}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, @llc={0x1a, 0x30c, 0xff, 0x3f, 0x0, 0x20, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='macvlan0\x00', 0x29d7bb43, 0xffffffff, 0x24}) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x11, &(0x7f0000000240)}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 06:35:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf25020000000c0005000300000000000000fe995610bc904b727649641f13690c0006000200000000f7ffffff0005000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44008080}, 0x40) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x147d02, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000002c0)) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2602, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x16f441, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) ioctl$TIOCNXCL(r0, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 06:35:16 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 06:35:16 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0xa9ec, 0x1000, 0x1, 0xfffffff8, 0x17, "51ffd96befb5f1902cb418f5f857dc4f43ed65"}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 0: r0 = socket(0xa, 0x3, 0x5) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @initdev}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @multicast1}, &(0x7f0000000340)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001580)={0x708, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0fa}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1483}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r3}, {0x274, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xff23, 0x7f, 0x3}, {0x6, 0x40, 0xdf, 0x6}, {0x200, 0x2, 0x81, 0x10001}, {0x6, 0x7, 0x81, 0x7fffffff}, {0x80, 0x9, 0x8, 0xd3fa}, {0x4, 0x40, 0x80, 0x3}, {0x6, 0x0, 0x1, 0x200}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xe94, 0xf8, 0x0, 0xf310}, {0x9, 0x48, 0x3f, 0x7}, {0x40, 0x7, 0x3, 0x800}, {0x9, 0xcf, 0xfa, 0x6204}, {0x3, 0x68, 0xae, 0xfff}, {0x800, 0x7, 0x4, 0x80000000}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c28}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x20, 0x6, 0x7f}, {0x8, 0xfb, 0x2, 0x4}, {0xff, 0x4, 0x80, 0x2}, {0x1, 0x4, 0x7, 0x8}, {0x6, 0xfb, 0x5, 0x83}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x24000000}, 0x804) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) write$selinux_attr(r6, &(0x7f0000000180)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f00000003c0)={0x0, @hci={0x1f, 0x1, 0x3}, @isdn={0x22, 0x2, 0x5}, @in={0x2, 0x4e22, @multicast1}, 0x6957, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000380)='macvtap0\x00', 0x100000000, 0x3, 0x1}) 06:35:16 executing program 1: r0 = socket(0xa, 0x3, 0xffff7bf2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20008851}, 0x20004004) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @empty}, 0x81}}, 0x0, 0x0, 0x21, 0x0, "fa158c33a1b7e21e00e33bd64ef295ff6aacd8b1904dc3804de62a69bb5a932c6ad671fa8b18a1582290d43aa6779e4df3b73b4bd1db6d56a1398f23d1e451e2e72862f6b5fdb6a1c055b8bb115b358c"}, 0xd8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 06:35:16 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 06:35:16 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 06:35:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCCBRK(r0, 0x5428) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 3: fsopen(&(0x7f0000000040)='pstore\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100)=r0, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) 06:35:16 executing program 1: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @rc={0x1f, @none, 0xc1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1}, 0x1}}, 0x1, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x3, 0x81, 0x3}) 06:35:16 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xf4c873d9c13bdc02}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = fsopen(&(0x7f0000000040)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='\x00', 0x0, r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4012}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x8800) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) ioctl$TIOCCBRK(r2, 0x5428) 06:35:16 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xf4c873d9c13bdc02}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) pipe(&(0x7f0000000e00)) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 1: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)=""/240, &(0x7f0000000440)=0xf0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @rc={0x1f, @none, 0x40}, @can={0x1d, 0x0}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x156, &(0x7f0000000100)='ip6gretap0\x00', 0x40, 0x4, 0x2613}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf250300000008000200010000003c0001800800060000000000080006000400000008000700", @ANYRES32=0x0, @ANYBLOB="0800060000000000080006000100000008000700", @ANYRES32=0x0, @ANYBLOB="060001000a0000002400018008000700", @ANYRES32=0x0, @ANYBLOB="060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB="05420000f1000000080003000600000060000180080003000a01010114000400ff02020000000000000000000000000108000700", @ANYRES32=r3, @ANYBLOB="14000400ff02000000000000000000000000000114000400fe8000000000000000000000000000bb060005004e23000008000300ac1414380800030008000000"], 0xec}, 0x1, 0x0, 0x0, 0x4080000}, 0xc004) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) ioctl$TIOCCBRK(r2, 0x5428) 06:35:16 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xf4c873d9c13bdc02}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 0: r0 = socket(0xa, 0x3, 0x5) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x81) r4 = fsmount(0xffffffffffffffff, 0x0, 0x71) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x46}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x50af}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc0}, 0x20044010) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) ioctl$TIOCCBRK(r2, 0x5428) 06:35:16 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xc6500, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xf4c873d9c13bdc02}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x85) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x7fffffff}}, 0x0, 0x0, 0x1, 0x0, "22cf3b730c72fc0768f258839e2ca1500e1c45de6c2a3df59253152aa5695fbccf8d62a0db56ad60d69d6718f35ab7d2a62254fc04bf811d2607157cc3e1174de693965ec0d55c3f877b0557f1540c12"}, 0xd8) r1 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:16 executing program 0: r0 = socket(0x21, 0xa, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:16 executing program 2: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) 06:35:16 executing program 5: r0 = socket(0xa, 0x3, 0x5) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:16 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x0) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$TIOCNXCL(r2, 0x540d) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) 06:35:16 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) socketpair(0x29, 0x2, 0x4fa1, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2400c8c0) ioctl$TIOCSPTLCK(r7, 0x40045431, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4c}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r9}, {0x8, 0x1, r0}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4004881) 06:35:16 executing program 5: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 1: r0 = syz_io_uring_setup(0x715f, &(0x7f0000000000)={0x0, 0x9bd6, 0x4, 0x3, 0x8f}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x8000000) socket(0x26, 0x2, 0x2c4d1e9a) 06:35:16 executing program 5: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:16 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x0) 06:35:16 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) 06:35:16 executing program 0: r0 = socket(0xa, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x4, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 06:35:16 executing program 5: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x804}, 0x881) 06:35:17 executing program 1: r0 = socket(0x0, 0xa, 0x2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 06:35:17 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x0) 06:35:17 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) pipe(&(0x7f0000000e00)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x7d19e67bfbc36d01) 06:35:17 executing program 5: r0 = socket(0x0, 0x3, 0x5) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4