[ 32.434835] kauditd_printk_skb: 9 callbacks suppressed [ 32.434842] audit: type=1800 audit(1564520564.757:33): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.461867] audit: type=1800 audit(1564520564.757:34): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.162579] random: sshd: uninitialized urandom read (32 bytes read) [ 38.697001] audit: type=1400 audit(1564520571.017:35): avc: denied { map } for pid=6932 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.746708] random: sshd: uninitialized urandom read (32 bytes read) [ 39.362347] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. [ 44.995822] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/30 21:02:57 fuzzer started [ 45.188620] audit: type=1400 audit(1564520577.507:36): avc: denied { map } for pid=6941 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.361877] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/30 21:03:00 dialing manager at 10.128.0.105:34765 2019/07/30 21:03:00 syscalls: 2463 2019/07/30 21:03:00 code coverage: enabled 2019/07/30 21:03:00 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/30 21:03:00 extra coverage: extra coverage is not supported by the kernel 2019/07/30 21:03:00 setuid sandbox: enabled 2019/07/30 21:03:00 namespace sandbox: enabled 2019/07/30 21:03:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/30 21:03:00 fault injection: enabled 2019/07/30 21:03:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/30 21:03:00 net packet injection: enabled 2019/07/30 21:03:00 net device setup: enabled [ 49.578140] random: crng init done 21:04:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r0, 0x0, 0x1) readahead(r0, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000580)='./file0/file0\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31ff0f00000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff000000e4697611e73efe120000dcea1523674e4fc200000000000000000000d476805045b00e1800000000000000000000000000000000000004000000000073"], 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8607) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000540)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0/file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x8000000001910824, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') 21:04:48 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000390"], 0x14) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 21:04:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00\x0e', @ifru_names='bond_slave_1\x00'}) 21:04:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f00000086c0)=@newlink={0x40, 0x10, 0x505, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x8, 0xe}]]}}}]}, 0x40}}, 0x0) 21:04:48 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) creat(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0}) [ 155.993904] audit: type=1400 audit(1564520688.317:37): avc: denied { map } for pid=6941 comm="syz-fuzzer" path="/root/syzkaller-shm264044455" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 156.041725] audit: type=1400 audit(1564520688.317:38): avc: denied { map } for pid=6958 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13798 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 156.920265] IPVS: ftp: loaded support on port[0] = 21 [ 157.252385] chnl_net:caif_netlink_parms(): no params data found [ 157.262405] IPVS: ftp: loaded support on port[0] = 21 [ 157.318800] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.326055] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.333910] device bridge_slave_0 entered promiscuous mode [ 157.342905] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.349257] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.356307] device bridge_slave_1 entered promiscuous mode [ 157.377809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.386921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.405147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.412537] team0: Port device team_slave_0 added [ 157.420880] IPVS: ftp: loaded support on port[0] = 21 [ 157.421307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.433908] team0: Port device team_slave_1 added [ 157.445978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.462843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.572452] device hsr_slave_0 entered promiscuous mode [ 157.620481] device hsr_slave_1 entered promiscuous mode [ 157.665592] chnl_net:caif_netlink_parms(): no params data found [ 157.678334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.689032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.715179] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.721640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.728541] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.735015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.752424] IPVS: ftp: loaded support on port[0] = 21 [ 157.811580] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.817995] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.826856] device bridge_slave_0 entered promiscuous mode [ 157.834160] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.840611] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.847609] device bridge_slave_1 entered promiscuous mode [ 157.866889] chnl_net:caif_netlink_parms(): no params data found [ 157.881572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.898707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.925603] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.933361] team0: Port device team_slave_0 added [ 157.957278] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.957306] IPVS: ftp: loaded support on port[0] = 21 [ 157.964615] team0: Port device team_slave_1 added [ 157.975861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.987102] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.993725] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.000727] device bridge_slave_0 entered promiscuous mode [ 158.007038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.023377] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.029805] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.037305] device bridge_slave_1 entered promiscuous mode [ 158.102203] device hsr_slave_0 entered promiscuous mode [ 158.140411] device hsr_slave_1 entered promiscuous mode [ 158.180875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.204215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.227188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.237220] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.264295] IPVS: ftp: loaded support on port[0] = 21 [ 158.288239] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.294668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.301343] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.307672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.315965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.325123] team0: Port device team_slave_0 added [ 158.367485] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 158.373755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.382537] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.389594] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.397005] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.415572] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.422997] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.431050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.438246] team0: Port device team_slave_1 added [ 158.446182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.453641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.462087] chnl_net:caif_netlink_parms(): no params data found [ 158.478753] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.489599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.505258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.513360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.562178] device hsr_slave_0 entered promiscuous mode [ 158.600362] device hsr_slave_1 entered promiscuous mode [ 158.640672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.647689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.673047] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.679143] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.726945] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.733773] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.740755] device bridge_slave_0 entered promiscuous mode [ 158.750349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.778236] chnl_net:caif_netlink_parms(): no params data found [ 158.793095] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.799506] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.806775] device bridge_slave_1 entered promiscuous mode [ 158.813359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.821658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.829178] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.835549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.845087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.868690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.876477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.885070] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.891453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.900692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.908003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.933329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.942997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.960489] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.975631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.982470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.992509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.006013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.027518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.035596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.043484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.052009] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.069381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.077641] team0: Port device team_slave_0 added [ 159.082786] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.089173] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.096795] device bridge_slave_0 entered promiscuous mode [ 159.104138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.117727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.124952] team0: Port device team_slave_1 added [ 159.130009] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.136573] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.143782] device bridge_slave_1 entered promiscuous mode [ 159.153699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.161851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.193724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.203236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.210786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.219202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.232871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.256705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.264825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.272498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.279850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.287286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.294305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.303056] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.309119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.325974] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.332675] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.339949] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.356146] chnl_net:caif_netlink_parms(): no params data found [ 159.379952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.389634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.433580] device hsr_slave_0 entered promiscuous mode [ 159.480504] device hsr_slave_1 entered promiscuous mode [ 159.531040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.538635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.546504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.554241] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.560602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.569388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.595641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.604495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.612566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.621135] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.627489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.648257] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.656690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.665761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.673492] team0: Port device team_slave_0 added [ 159.686581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.697205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.705859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.713020] team0: Port device team_slave_1 added [ 159.718255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.726055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.733486] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.739813] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.746847] device bridge_slave_0 entered promiscuous mode [ 159.754727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.765038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.783248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.795319] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.803604] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.812405] device bridge_slave_1 entered promiscuous mode [ 159.824408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.834051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.841632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.849933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.858978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.912486] device hsr_slave_0 entered promiscuous mode [ 159.950364] device hsr_slave_1 entered promiscuous mode [ 159.991312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.004766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.014490] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.023465] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.042287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.050612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.058449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.066372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.073842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.086011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.093280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.109642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.130218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.138100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.147664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.155557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.163373] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.175885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.182989] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.192648] team0: Port device team_slave_0 added [ 160.200792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.208223] team0: Port device team_slave_1 added [ 160.219761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.230202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.239099] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.245953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.255524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.266717] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.277580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.280058] hrtimer: interrupt took 55599 ns [ 160.290504] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.297831] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.314642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.322665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.334603] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.341112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.350269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.373802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.383346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.399406] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.410361] audit: type=1400 audit(1564520692.727:39): avc: denied { create } for pid=6993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.434600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.446513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.454491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.467607] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.474026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.486700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.493831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.500253] audit: type=1400 audit(1564520692.737:40): avc: denied { write } for pid=6993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.507184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.550924] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.557022] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.570301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.595996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.616255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.631272] audit: type=1400 audit(1564520692.737:41): avc: denied { read } for pid=6993 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.665230] device hsr_slave_0 entered promiscuous mode [ 160.720426] device hsr_slave_1 entered promiscuous mode [ 160.760671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.767752] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.779528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.788077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.801513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.809826] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.816265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.828070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.839402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.851715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.867348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.876749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.892896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.911043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.918723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.930591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.938321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.950610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.958256] bridge0: port 2(bridge_slave_1) entered blocking state 21:04:53 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r0, 0x0, 0x1) readahead(r0, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000580)='./file0/file0\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31ff0f00000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff000000e4697611e73efe120000dcea1523674e4fc200000000000000000000d476805045b00e1800000000000000000000000000000000000004000000000073"], 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8607) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000540)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0/file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x8000000001910824, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') [ 160.964682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.976197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.991327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.005332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.027692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.042999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.067308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 21:04:53 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xd, &(0x7f0000000140)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x4000) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) [ 161.084435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.101218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 21:04:53 executing program 1: setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7}, 0x14) r0 = socket$kcm(0x2, 0x2, 0x73) bind(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='lo\x00', 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback=0xac1414bb}, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@ipx={0x4, 0x8, 0x7, "58779c4ebb80", 0x80000000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="96e71154225da0ef6ec49433dd2d6cf0ead1a22de2da5c80a6461d2d9e5f4d2ed9564b8859ad96c469e9118ef23129c67f2951d9580e80f3af5e8c7cebcafd0fa5e4339900ea6a6b786c99eec1f0c3d40f9c8284935f048ffda5bceb299ad802db1b60c0a242a7e1671f5a8620387477dfacb3577bdbb43668629b91eb83b3ade6957aff732651d063", 0x89}, {&(0x7f00000002c0)="d444ebc9099dca47e36040b6fb05976f34ecadd6292f4cef0b673a145e5d6ef6c60082b4f54f7f1fa9bcca1d87bf5411a0b8c02b03938072471dddb254695febddb266bc42c72834208e1b1720dec2f6c0b4b17c35bb062a7c603dbf50f0a32aa7d2a0f78988798ec24bea38e282b6c5b51314c023c68e7a5ef78cb1e26643081e4741955482623d183940404c3c6852194e24d304742d3e4879c40246145be61ebd71d6b0c07d6fc3d919026341afe329e7d4cdb6a1e201541cad0a3fe454839b62634f1b5660580c84a9e1074e0045c1f855a031dc9b82c0e924", 0xdb}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88000000000000001501000085bed538a8821dab5b305919b06a419923e1da6f904f18ab0c3fb38f8044cab394878f279b087c761b6a85a9a7051dc808029dcc16f09da2b75fd2f7b3dc0433792e5adf5a99200c69cc10a8be072661d5701fd1edff439f06bfaa0d6b5abf242187d5df97ad00"], 0x88}, 0x4) [ 161.143849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.177767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.191848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.203340] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.209414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.219021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.227875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 21:04:53 executing program 1: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000040)) unshare(0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 161.238162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.247523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.257676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.275296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.294739] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.305938] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.323831] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.333917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.343498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.357027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.374963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.388302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.403503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.416080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.424027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.444471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.457479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.475988] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.482419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.502841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.512366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.527591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.544998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.553317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.571309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.579501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.592322] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.598690] bridge0: port 2(bridge_slave_1) entered forwarding state 21:04:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2132fadf71ca07314385015c14a06ee6f5e3f2faa827a2459e7f04a10200000083f7c39ade3facc99b40005bcf32da69d9c485b3ab14f06d6e"], 0x1}}, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220000, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x6, {0x6, 0x4, 0x0, 0x3f, 0x7, 0x7}}) [ 161.624724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.643746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.656014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.679371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.693246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.714617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.729027] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.745170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.759313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.777833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.802821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.818001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.827298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.860363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.876927] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.885956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 21:04:54 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r0, 0x0, 0x1) readahead(r0, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000580)='./file0/file0\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31ff0f00000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff000000e4697611e73efe120000dcea1523674e4fc200000000000000000000d476805045b00e1800000000000000000000000000000000000004000000000073"], 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8607) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000540)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0/file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x8000000001910824, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') [ 161.891151] audit: type=1400 audit(1564520694.207:42): avc: denied { create } for pid=7040 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 161.899275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.939277] bond0: Releasing backup interface bond_slave_1 [ 161.946330] audit: type=1400 audit(1564520694.207:43): avc: denied { ioctl } for pid=7040 comm="syz-executor.5" path="socket:[26835]" dev="sockfs" ino=26835 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 162.013227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.020984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.033447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.042033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.071600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.083297] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 162.089420] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.103255] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.116287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.124084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.136130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.143330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.156159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.177295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.187035] bond0: Releasing backup interface bond_slave_1 21:04:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00\x0e', @ifru_names='bond_slave_1\x00'}) [ 162.243863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.251820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.271970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.287853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.299214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.315717] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.322155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.335238] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.342573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.351966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.370524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.378773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.391343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.398973] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.405372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.423201] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.434631] bond0: Releasing backup interface bond_slave_1 [ 162.489568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.506116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.534449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.549309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 162.569386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 21:04:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00\x0e', @ifru_names='bond_slave_1\x00'}) [ 162.581923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.591712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.638351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.658964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.677607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 21:04:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x220000, 0xc4) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x4d, 0x401, 0x2681, 0x77000, 0x1b, 0x6, 0x3, 0x79, 0x80000000}) socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) accept4$alg(r2, 0x0, 0x0, 0x80000) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x80000000000, r0, 0x0}]) [ 162.699993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.719495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.737089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 21:04:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r0, 0x0, 0x1) readahead(r0, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x20) sendfile(r1, r1, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000580)='./file0/file0\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31ff0f00000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff000000e4697611e73efe120000dcea1523674e4fc200000000000000000000d476805045b00e1800000000000000000000000000000000000004000000000073"], 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8607) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000540)) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0/file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x8000000001910824, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') [ 162.762234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.788949] bond0: Releasing backup interface bond_slave_1 [ 162.826576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.841508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.852359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.867980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.880668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.888828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.907379] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.914488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.947050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.957545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.976932] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.988895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.017074] autofs4:pid:7093:autofs4_fill_super: called with bogus options 21:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x1c0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x8001, 0x83dc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x4000000004, 0x4, 0x8}, 0x2c) 21:04:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00\x0e', @ifru_names='bond_slave_1\x00'}) 21:04:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x220000, 0xc4) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x4d, 0x401, 0x2681, 0x77000, 0x1b, 0x6, 0x3, 0x79, 0x80000000}) socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) accept4$alg(r2, 0x0, 0x0, 0x80000) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x80000000000, r0, 0x0}]) 21:04:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) 21:04:56 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) creat(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0}) 21:04:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x84, 0x10, 0x85ffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x2e) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x3, 0x19}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xe6}}, 0x1, 0x0, 0x80000000, 0x5bd, 0x6}, &(0x7f0000000140)=0x98) [ 164.362951] bond0: Releasing backup interface bond_slave_1 [ 164.389531] autofs4:pid:7107:autofs4_fill_super: called with bogus options [ 164.433517] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:04:56 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2132fadf71ca07314385015c14a06ee6f5e3f2faa827a2459e7f04a10200000083f7c39ade3facc99b40005bcf32da69d9c485b3ab14f06d6e"], 0x1}}, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220000, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x6, {0x6, 0x4, 0x0, 0x3f, 0x7, 0x7}}) 21:04:56 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) creat(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0}) 21:04:56 executing program 4: r0 = socket$kcm(0x2, 0x20000000002, 0x73) recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="148d54a8d627360ea111f930eefbfb6ac7f586b84ef3f3ba0d483591cacc0ac73c913c788a7546c195691cdc55fc41e5ac704f66878689a63c9394865657e09d19629018840e1bee4ecaadc41c63562b6caf06d7084508b85af5f5b080d07b47d48930c1073a59e29c6008acd53d13cc06f159", 0x73}, {&(0x7f0000000680)="7422542c4a17931124ba452acb5f83d11ba1d8ce6e653738a0e21e2b36a7c11368f27911277536ec52e7bcdb34e9438570f25011aaeaa4c62feacaedecb3a8341cfa0862a99a80967705853539d812d00323373da008f208410bfdec56f1c734c6f74b2fede85e81541945b682a27a0b6a845252755c9626f7659b67237001b159d1bea6b88cbb85dc26e7c2004589645f1eb18b534f715d39af1e015485e3a5b99c746e29b4c1218eef61a7636637e09b0d60a0717f424deed2d55415e46973cc281f15ab3d4c666a514d7c754b029f935755f3a6c987614f0b644b0a9890df20e47a2ff8", 0xe5}, {&(0x7f0000000540)}, {&(0x7f0000000780)="d891b843d2bb98469ff99f279aa254fba55c77324306113cc46b2bbb9316cf938b7d3b7e3fb5960da26577e7d7d1e1c88274c97736a7ffea8d72057abb544f98a6103bc28607c3f2bd4acdf7f593881f7478722552e6d7a9354f4d69812babd38d4f7bdf56c49062b645cc0608d63e62aae330ce82b7fea18153c749e417b96dd2413d21ccf30fa705", 0x89}, {&(0x7f0000000580)='\'', 0x1}, {&(0x7f0000000840)="5cb781833918c5ec33414a59a73e171f3d1b059d548bad14498f8181238c23417375515f55340709641e2c28278173e67aeb6c1e4415c70d11a9caa21dd9c95298425e2a898e9be3cf375c9444eca8cf2a1485cb03ddee677be1fda76fcb5b5c969c53c82aa361436dd61942c0d46398b8f3e1bfc7eec2f6735fe7099bf884420f91e0ac378cc8e17c30c46b3262dfe5371de7ec79049c7a59a1c027fc79c240e2f105c107e5f229a128bbcec774eb44589af8d89324f6ca97518e68d1e6c0ff9e7e1881cb3f62b9e86eca9e733c6712503580ad7e358337", 0xd8}], 0x6, &(0x7f00000009c0)=[{0x88, 0xff, 0x3f, "19bcadcdd8de2ac31b692e0a6702ea238fcd10e68a00eac635e4a379035189bf6d20ce7a8c2c540e1d6a0d46fa06f32b68d7971ee610899209050bf1c33aba4e930fbde40f17f92811597a4b882162796b45aa6d10346a327f5f3d6bb3a1e53c61f6fbfa074bf7371f7fd53bbc69940ee0ee582bce828ca9"}, {0x98, 0x18f, 0x101, "95b21e5cdc26b8284854ec96bc47777c6ff364ed3ed786786363301f272008978a592ca575c8c04745ed6852fb731259043733fb1c875ab9a124b22696ed27924dc63fb62ef4a5555f3ae5d06bb01d1ed3d9364ef02bd8f8779e25c2a6f11c241d70999057c2ea3c638501b387956541c7380c6ec768c3b38f7248a3dd9cb8a14ce1bd"}, {0xc8, 0x10e, 0x800, "afaf0c8b9eddf7819daaea0d1c3f156146543a5edcf4df3c8a594db22b6b9c7281c0dc2e91e27f6b4dedcbd59e26e487683b3565975487d019fe4ab1495489ea18ed388bbc3cab190ad9611aed9871b7f44b23a051a07a8d7f95f4e3664c3bfb2fab85107c3756bff6825afa142fa28575c1a4c8c52bf9386ac1d2e9e524a089c00fa7d72593ae3b7bec3052b80ac2e56ff8ef556e50595d1c9b3f7075d9e9ca3ee261dcf26f039f514fe328bda0ae90b8fe02d361"}, {0xc0, 0x13b, 0x1, "5ddc09f71f48b6a2a8bbe9ad70f2816b92292fb0f2c7bb6d1284a9af8c14a95f7f2a7103f9770444013277f3c7c720ad702a55b4e1c84f0acbe964059931648cc4af202a9836091327e3ddf37d249a51e339d6cf14c2a0b4a56ece7d322c1439fd5b0d6007c9bb069a99353be5be27ee7fc7632cea837103877f4b6f05b66dd292a966e8259218065e172c6815db09a1b9c6a4ae042d692f2bd32372a1bb810843cba3cc163e0215b2e0"}, {0x18, 0x1ff, 0xd9, "caa9d4b7ee33f2"}, {0x80, 0x117, 0x0, "1bcf9ef55876fc261bf74fa1774e93da03fb4258fc366b6fe134c17601e0b12d2c6d346030d180e86e311d628612c7fc5eb70c60d33d28a630a7c1f2a50b073902c220679ca33965036129e0e6e658d001b528552beb8d3aa5b247166ed505f5f2324b3e656d97fda6894dcbfe54a88c"}, {0xe8, 0x29, 0x3, "8b97e7f7a443f2a4c57ff771eee49293fa1150fdd09fd464afc88c61c5774b5feba2509caeca541df89c6b4ebdba222f9a7cadf7345d472f27e07af5b9a6641c041151972aedfb3ab6ff0f17d32883ccdc172266a77fb1484258ee3b856f403469c6db1a5efd22082d2563f02d804f535a282c6c5ad29d2d7f4a7df7895876ba7dee446d62fd5c8808323d699e3630b34da6ba74dc3efd8a26a9ff0f450f6edd10427342c9ef0d678290373c6282a76b10e047877d1707ec22ef8e5a4401236ee3f2c12b4c3dc035c879de49b862c82ff0b669c9ca9f"}, {0x110, 0x105, 0x2, "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"}, {0x80, 0x10e, 0x8, "1b3bbb85137307c7b67ccaf39a14d268c92e3aad70764d9f3110a6abc55a9589a48e7077c9a4b201e70b7b77abc10e61675dfae0819ebb54b433c6fc62262391988e830f0a2aaadad37fae2f6ae4d37a1460fc85adaca26f87adf0d342026f21b511cb6ea455d50e484d"}, {0x28, 0x117, 0x3, "636a94dc32b5227995019d2d1a214f7dd2"}], 0x5e0}, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xf039, @local, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @remote, 0x101}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0xc0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="51c880468d1dfd8580feb0818202a38b627a2ab693fa9326fc390a2bd9f50a43b9cc50c82288ecda9cb3be39747d90d2a384ba1c4ef0f3175c38779c7cc8f17acb1fb6847be88a459547b5e4f086552bcf15ca07c6d21c275034d3e9fbe0abfb40b9"], 0x62) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000001380)=0x1000) write$cgroup_pid(r4, &(0x7f0000000000), 0xfffffea6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000003c0)={0x1, 0x10001, 0x22, 0xcf04}) execveat(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000001140)=[&(0x7f0000000fc0)='md5sum*\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='TIPC\x00', &(0x7f0000001080)='memory.events\x00', &(0x7f00000010c0)='wlan0\x00', &(0x7f0000001100)='memory.events\x00'], &(0x7f0000001340)=[&(0x7f0000001180)='nodev[\x00', &(0x7f00000011c0)='ppp0@:\x00', &(0x7f0000001200)='syz1\x00', &(0x7f0000001240)='cpuset:$^posix_acl_access[^vboxnet1\x00', &(0x7f0000001280)='memory.events\x00', &(0x7f00000012c0)='\'\x00', &(0x7f0000001300)='TIPC\x00'], 0x400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000440)={&(0x7f00000013c0)={0xc, r6, 0x100, 0x70bd2c, 0x259fdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'sy~1\x00'}}, [""]}, 0x28}}, 0x24040000) 21:04:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) getuid() lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) fstat(r1, &(0x7f0000000740)) r2 = dup2(r0, r1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x3, 0x9, 0x6}) getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) getpid() getpgrp(r3) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x402000, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x11) getgid() 21:04:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="66b9ad0800000f320f8c0100f30f1ef866660f38810d66b9800000c00f326635001000000f302ef0199b0f000fae95390026f20f12bb00000f08f26565662ed9876ff7", 0x43}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x10000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000140)={0x100, 0x400, 0x7fc7, 0x2, 0x18, 0x6, 0x9, 0xfa0, 0x2, 0xbae, 0x5, 0x100000000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x74a}, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x19a8, 0x2, 0x20, 0x36, 0x401, 0x3, 0x0, 0x9, 0x54, 0x40, 0x183, 0xca89, 0x6, 0x38, 0x1, 0x5, 0x6, 0xff}, [{0x0, 0x80, 0x3, 0x657e, 0x411, 0xf95, 0x7, 0xe907}, {0x60000000, 0x200, 0x7, 0x20, 0x40, 0x1, 0x1, 0xffffffffffffffff}], "39979e59aafde8bcb5cb5febc5f5c00d253ee27ec41f26576fd3983d0ee1602536de4d853279b1ce849f8ecdace4c511777189941be4cf2402911ecab0effc7a1ce319c01bcdc776f3bd508068d2b1cc9748dc3c03f42fd9be924cbbdeb9ed2f471a37f8786faeec6f3eddb1a8972e42e0907f75d1e33b4e34fc13a91c7469b83592b0a9b72febc24b37b6903b74c58eb4252d54fe93800b53a07b3a0bbb7b6428650daa3ab64d12b95332ead8f1cff906cf889ed07b5098a3aae785238b8df2e062a5", [[], [], [], [], [], [], [], [], [], []]}, 0xb73) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:04:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, 0x0, 0x54}, 0x0) close(r1) clone(0x20010000, &(0x7f0000000580)="4b536a7d47f7cf3dd942ff979f2ed3e0da4fa0ae3100ba738562249a20c4addadee9b8ab7bebf5a9959012903c01de23d60ddab9fbb22f4049b4e82801b77826f6dc9d4c4f9cbb8c3bdbdc780fc5835cf2ac5a6039fb1ae023282aecdfc32b992e49e2ed63ecf28053398da07bd0a801ee0c3f1b67191d9ee240d3461e3e220694d6d5e98940105f867ddd4ee34a7d6d07de4745ca15168f561fe6b0d99944881093c7b2c716422a24742a1931c1549e4190c7de1a878a156700eaaa58fe2b45028c6746ef2fd26cddbe5e4acdc051267944c9de7ef9d89d6fe5a6e10cd6017b4afabc025bfb07b6721d0f0d0360fbcf3c6ebfdb50636f420f1ed753867f3d4e56aedeaaf40c020454a268e1f67275c66cf18b0c488e4e4f912bb2d7d148e1a26ff80dfd5e15f16134965a11ee6896794f8774c7468548311494a111d0ba959194b06ac62583b829b856757f900f379db99ac165d8b6942111ec57db7f3d6ce794728de6cdac3c59da5adc99646c66caf5f9f03cc8e1be62c5d767b5f2b9c649a5a35b23c1a05807f1d8dbd36c947449ea9ab661b555591320302c5a90141d28963164f3171aadfc7c83bcef1373ad55d2fac30ffe0848ef28a01bcf950a80c77e4e9280a2a9c6d57c71082fe0af363ccc4b16a0b77582b50eb23146bc130004ab53e4e3023e0992bfeb4b395ae2fbd5ccddeb436858cb1380d5a3800c6b5b72fe7495ae26136146de0ac79faf23f55790f638e68a6ff171baa0704b4381f6e4a05d6a96f507c57f872e792b857c73ba1b277f149be7a42027c775755e5abe1d8d730d660092a99c213f4588208f56706e53d20901245a7b7b4741291ba47f82f02418095da8f36d641183f60a521d47363521bfe6881fc1bbfff4fc5e114644b4ada46b27be8a54f2d868a4b6d1dc9d57805c56d6f1e0a2bcda00dd8be4ba6b2588e705fd71e194eefca83c2014700fd4f0929def31fbd125a7709bb33f0ddc9eb5e726fbf0889c29b54197a03e0b6ed3be6af99abf47a81550b7266d03b6cb13a1349fe0c7d40932ec0115913a8107e2f298aff819cd5fb1a69b24d39e6a0c699490b359ab83f088abeed541610a9d02c652af36b029c846c9b41f9edb68f8e3f73c27155cdbce2f18ea3e0b94a86f28693be98fcea434642d0f860286f7beb4d82adb10a29d163d37d578d65a29fb8b4c4e5dca70d5b9baf992cb075edeac1f4dfdc7150428af1ee429389c916aec747c316197abf7859917e8553eebf48d3f443380d4d8e954571610e365f58b95cc2874ebf170f09ee894e9395e4c62714dc14682da8e1b98f8315991edc2817405e7eec0bc9192f38045d828798cfb058262d760492b8ad52c0141d508190903d58ff1b008ba534e73906b34506687b1112fe12c9af2c73880f12424bae24ca066c903e9f439daf5395e469129ae62183946e5b0c9a6154ae36e96af9881f43d062ca38ebba19aab91a47b84dfc12888ec9546f459fc85a63a4ef895cfd5173543f998f39d9812ea81615ea7520b9953c20d4c3e279960641faf676a69fe5cc39b9f1b9233dcb61eebe1b7e2e432cc286f20fb74712cb6b3c4829842effdb56ea3573487360675e34f8f2f6cba92750a49de1227685c2b7eb313436dd1b2a510b5bf59ce6779f8111bcc8b6f3e23121909d98f757d9b0d11dd2e1d0ac9b5bcd1c420ca48a6340a96e03a5b74356c4572991ef04c68b0fff705043ce27a96d3323aa321bee869ec46d521fd9fe74f5ebeb17afb196f920e4627dc3422052d03de316e85b81d7b94831281ceaf08754d72294dcf005bd6cec9f1e29b66a59abd3709cbe4d4e1c4773bf2530a49efa65d93f3ee539f7f443dc461d23b1bc2eb30fc47568ee0b3a0a59bf7f275669985a02bd7789879bb71a244d68276efe1d4137b455bbc4557f5f8120abbd43a09d40ac5582c53743eb6cd3ecadab6f843eecfcfeec2d031249af5fd7d79a1371d58f69866df7f4ae412d5a5fb3ace3a0162029e7485c7a2f50d908facc39945f3c87059e8df9a6a71058f3648f04561c9671e9e6557365ae65355c80b70fa2468a762db1fc1e8e04ccfe4297a0973f705a059baeeca7f87f85f36980eed597bcd6f2413766d23f696d2bd445ce504639572e52ae62665ed8a5f31f7da1015936e689e51a078f0604738148db56c12bb728aea5359170d8b92edca4f0eca0a14f3a09f3f99e02b2eff6c9aa43c33281262f9a93322e49f5b59d293b154cc068c82499c412c288229d37ad9268c1b162f48e52607f4da628db39667dba31c13a09d44ec4cc22a0b86eb6d40dc80a06b6dbbfd1111f1fbba0f16d9625ee2455e96ba6c77bb6434b6292daa412f4c760f710c358d3992ffd31ce3f6fc560659e120469ab5c5abc1c4ef3b5671af3f132e0243508c0cf90372cd4627237b17ffd22a9396908ebf61cba7869d071a4aa4b2e9221e16053354491fe7c2b233b8a9762d8a7baba39801f1e7e323dee9ab515b2b2d7380d9d2cf3c8b6f8ee3d911e8554386a78bee03759be38897710f25f71bde482b3a63726ac1979551cff4c810e14828b8fc83714963753c91e4cf544bac85abc6d3dae3bb9e1398ecb270c53ad30f62c1b75aad1dfe0eee6718ba8d89ee0cba8528ceafb2e19fa468feeca75bcb1fa595574f54c4dabd63826058be3e83b93b5b7cf518a7feed4b63a8322f8bea5a1319900500449a3953539dc3301e612082ea69be11f3156acad3463821c1dca8f7ad6065b12a788f8e853bd2d87d49c3f45a16fb2068061ce534697c6b144e37d64e15e4384c78b0841366ee56cef8161862657e508f92f0427b9a8493ecdbd04218b67de5b29f2e31bc67ad6d86e4778f8c191f2860a3e7f474b28aad45964ef39ecc69b86c39ae90ffc42cc9574a1eaba546f1453acf8136de5f7c7f1f1c8386aa0759245a4b0e66797b49fe3b08e7e88272eb4df0d15bd5722af3bcaec67af5cfd9494806b234e656310f55ca9d688247eb9d80120b886d1f5ef3cba31d5d7459d6c847a01228d8b9f6b458ba173ea98fe9b16762506daa2ed16f22c953765ada9a15d543d6fe59e607e565589d4c54bc4cb3ea9fa0f40ce705f18f37abe36a1f2b95e7941ce8e5a3f9d35338f1258e1db4553f13b82c26f561deefec1de608e0a6d9252ceff1892510e91dd6810a35e86006e0f35b8e89e7714933b465b382901ecab307b9c09b83abe7faa25de806d052497cb9ce82252d136d074fa72b124552c5e0ec50df3e6623f29ddb47da9f80aac66d2a3a80d6b47bdc2c9c81ddb53b33055211e2551f3df8a92032083ea19cb03aae6e7a32d018ac33f37468926293250bed3fd7b47fb35bd64418d9f4ed75a9ab19849221c2c92f43f8aa0d24100e36ef131cf6941fdf2f84eae6816688aebc49330837a77aa7adbec4390240f6a6125afbcbd88cff8ffd25bacf4eff3d2db57dd174576eeb0c56cd1f3968000d0b17f9d1e8ae8e5c24a2927b7e43656992eddb47c834c150e490a12f1f5797bbe66d09191ad01bae864d201d72a5594184d6be8024193a543257407507319523c6ed604b7a2cafe226aaa26795d5e79deb4e30bdc8728393e1bccda8d74b549667350474f5485c086000eceb50129b852840722ee7093513a7e38e06ec131e28b464e212e5dabf943ca2d1aa24b29a401bb98494e50225d1b9c28c95fb034b57581a95ed4d9cabee37c61abad7ecf81f7cb34d6b9027cc28313d091bda66cd92bade61185333232187f5f89a42c9b8ca56ff7c2ae29e2c727e5bafa3076a08118f08e1a37e169e20f5f0acfacd21eac26992604acc27aefe2982bad3804943cf1677fd8483a83dc41c1bac97bda2eb48f9a9980cdc701badbb176e3698dbb8bf405b357c59f00c7a4798e95b465d0026a497d46c69877b4a80f570e971e9ff33dc9aac02562373205c17bd99125485517079d700eb6f3897e7183ada13793f06c98036c4dab158278db40f059afdd9724abc75182c226f526a3fefd809371a7c2c01669f1dd8925a2391006588f6480688bb44d56e7464a60586d6850fd8352a5fe56c8b4da59da97ca0bc2ff3e40a1baaa2964ebbd0c1d902a5ce6a6103fe3e7142933abc7065334c24dbe463b5064d3c804b8c52d309d79c6322951c207ff3fe5c528e0c38bd6a6b277be1ac460ca5c1cab6501db0e6b7cd28e4206360837ee7747fa02281a6615a00c6d2ad7537b978c2908217a56b07f35f1457a5e1b2f97ee9bcb4037090fbdd3f0255b8fe64677b898e3db4006bb328055d225d8754a739fe92a045f6870b47a5b03f3870262de95a6b2059c50e7f772937f601136291696a4ac0ae79cb5d397a94b81d79e2d2f4a5c8fef89c023cb72ee32e5d31b8bfdf54d690e948d0f6a08a5d627e62799f53ea828bb9582dc5b1630608961d1a0ef4e906bf021e568b51a8ee6c5bf77520798fa335fed1387e654a49947a487a7150ae168c9718d922daee901e7cfd88267fe4707b44f1830d16db2ac8f781ddbab21f9231661167457a6d0d4748b6619aad82f03790310a772cf7bd77e5f79d65bf56b704ecc99f1e7de8e2bc0d5b7f003135e010c7eeaad89f631ba1397a07f197dadae4b53ac7f2fdecfa56215dab09f9fa139f532fe20e568ce209bfc010f46f5d2d0d54522160a4d4ff2a43484abd399a495ec7f3f4b08d017931897c403da4e6deefc997892b9b24c0f498ec5b5c3b01772630ca278675a7b02d94d638222d292121ef051649d5a0892a8c5d585d56b4c04018649250ec1074ce4b7d965539ffedd9af2d7989dc6efc195c1c6f8b87cbe9f22f3bb53ea48b8201e59bfd3fa1af547de656f8c533754fe49154bac52ec5c642ae076a4361c9c69a569779b528e5848d53d64ba79f1741b2bf40886675f7f501a5cbb86dcc51f31d1f7de1c07f190e3edc2eda8718e926b05cef12470756a473d4aea3a1c44c5244bf0b99f142c5709c802d22f6fc7b487f563fc74371e3662db7be1263561f811676a051a9654b891fd811994d36d26d8f50cc65d1be26ad4bbd3b09ee8889f5628ac7c63132b83a6bdf6d554fb054d426a6c135b8ff3468f695349e7d8baf7b65d64be6d945f8b57a96c1c504c577fc682cf83db4acbc67d6225ab93f4e32c3e7b1e005925be95405369f70d9f69c50ac3f71ab7fb0a520469ebeacf0b21465fe2cbfaed8f5d28b986cfa98efb83844a07ac86df2e46aad4c19e893aff417a3ac164a139a190556af8b7ffd0acebe2b44fccf36cd9faa713de6819cfd0ba51fd7d0da4e7c4f7cb6f81ffc560916babd4e15949e5a50224e0c0f15ac40d1627da1f8d66063f61ee33c8baed07d8f556bce41483218d5b240b48e033a38d22643400034f97a630414cd3e1f048cd16466c9cdd83afe2c56831951e288c545f44a5387ee312527752b9a145d5987d76b4502be0ac7f76713c901598946f4b3ccf60da1adb2cd92da181d305c279b6985069cc38254dfd4589709a979cf1c90a881bc283cecad12d9c9bb2843ba5d144e5d0730fb9d3e2ca5481cf92b4ffedb6fcdda287fae4f658f94e9de27e948147308feeb881be9d96cf8bc6294810d976865d976b2eb9b1c068b9d52303168507e412f0a6fa76a4eda456e141dcfe91b438d77c292256fcc8c84216a5f0a786b08bf7cf43f65d648386fe633d53afa9498bba2e913d43f09a4a0356307dbe0b521470ff5b39b8f29bc609143f6f1324756efc166bbfd5afe5a40948bd9aada5013d90380889a6f715806ba98f68dd0dec5828547ae98ba173a94", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="ae6ca4a6429935397bcce80049b8ff1ed329b0040e58fb09bcd8b0492f7c804270fb4c4d4d69f124b0f807d0dc42c07ebbeb9c7d3d142bba2b5d78701a43c706eefe38d1898e0dabd4bf2487f6323243e70ab1e8cff62dd0f76610288a4e7a0052b096749b5e38ae84ce852a1e7da475f890d9de49d16260e18fe78f7d2898468594d191d2b467975783dcaef70b70809b1365f30f10010353a3e07c0d85f7c6") write(r2, &(0x7f00000004c0)="32f378f4a9fb5287944caae9e8bd25d21ee5dcbdb16dfc87788602e5cea046abee5e012c733bf7074291e3b108d64d47df55eef8f6ac04a0923b4582a97dffca34470b7370ac9fa6023618f89578d0f105828d5fd2873fb8640280eb80c6de985e700a49f6ba9e785d8f9026d05fc1a2343212292f4019d38650cabae44a4e7ca63a0770811803e3a6f34a93cbbae53bf15eaa907818b983", 0x98) 21:04:57 executing program 3: r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="205eb35d7b0000107c0000003e93c354e86cba1c4729c3e1f764a9252f2dcd922618938e300e1d5b07a86aba00000020af83f28cbff9ae12c4"], 0x1}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$getenv(0x4201, r1, 0x8, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10000000000038) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:04:57 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) creat(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0}) [ 164.724270] autofs4:pid:7131:autofs4_fill_super: called with bogus options 21:04:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x200000) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x9}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) unshare(0x40000000) 21:04:57 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(r4, 0x0, 0x24e) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0xfe) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r7, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "6517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d060a35efd21affe238385d4de98c35d691bbbf35c5601687a77cfa847a"}, 0x4a) sendfile(r7, r7, &(0x7f0000000200), 0xa198) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write(r5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x4000000000000b9, 0x8050) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000140)={r3}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) [ 164.877152] autofs4:pid:7150:autofs4_fill_super: called with bogus options 21:04:57 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0xffffffa2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getuid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x1, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on='index=on'}, {@default_permissions='default_permissions'}, {@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@subj_type={'subj_type'}}, {@euid_lt={'euid<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'westwood\x00'}}, {@fowner_gt={'fowner>', r5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r4}}]}) setreuid(r4, r5) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x7c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$key(r3, 0x0, 0x42) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x401, 0x5000}) getpriority(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000400)='f2fs\x00', 0x0, 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2571ebcb4ef01ab8ec74f89a13320e9a2e4647116abe7b81b47a4033c829aa43c266463427a89e20386a51a6c93888bad182a01f529c62bfec910c191c9f", 0xfb3a55d367118b9d}], 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=""/174) pread64(0xffffffffffffffff, 0x0, 0xd2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 165.092393] audit: type=1400 audit(1564520697.417:44): avc: denied { wake_alarm } for pid=7161 comm="syz-executor.0" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 21:04:57 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0xffffffa2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getuid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x1, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on='index=on'}, {@default_permissions='default_permissions'}, {@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@subj_type={'subj_type'}}, {@euid_lt={'euid<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'westwood\x00'}}, {@fowner_gt={'fowner>', r5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r4}}]}) setreuid(r4, r5) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x7c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$key(r3, 0x0, 0x42) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x401, 0x5000}) getpriority(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000400)='f2fs\x00', 0x0, 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2571ebcb4ef01ab8ec74f89a13320e9a2e4647116abe7b81b47a4033c829aa43c266463427a89e20386a51a6c93888bad182a01f529c62bfec910c191c9f", 0xfb3a55d367118b9d}], 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=""/174) pread64(0xffffffffffffffff, 0x0, 0xd2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 165.620933] IPVS: ftp: loaded support on port[0] = 21 21:05:00 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2132fadf71ca07314385015c14a06ee6f5e3f2faa827a2459e7f04a10200000083f7c39ade3facc99b40005bcf32da69d9c485b3ab14f06d6e"], 0x1}}, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220000, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x6, {0x6, 0x4, 0x0, 0x3f, 0x7, 0x7}}) 21:05:00 executing program 4: r0 = socket$kcm(0x2, 0x20000000002, 0x73) recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="148d54a8d627360ea111f930eefbfb6ac7f586b84ef3f3ba0d483591cacc0ac73c913c788a7546c195691cdc55fc41e5ac704f66878689a63c9394865657e09d19629018840e1bee4ecaadc41c63562b6caf06d7084508b85af5f5b080d07b47d48930c1073a59e29c6008acd53d13cc06f159", 0x73}, {&(0x7f0000000680)="7422542c4a17931124ba452acb5f83d11ba1d8ce6e653738a0e21e2b36a7c11368f27911277536ec52e7bcdb34e9438570f25011aaeaa4c62feacaedecb3a8341cfa0862a99a80967705853539d812d00323373da008f208410bfdec56f1c734c6f74b2fede85e81541945b682a27a0b6a845252755c9626f7659b67237001b159d1bea6b88cbb85dc26e7c2004589645f1eb18b534f715d39af1e015485e3a5b99c746e29b4c1218eef61a7636637e09b0d60a0717f424deed2d55415e46973cc281f15ab3d4c666a514d7c754b029f935755f3a6c987614f0b644b0a9890df20e47a2ff8", 0xe5}, {&(0x7f0000000540)}, {&(0x7f0000000780)="d891b843d2bb98469ff99f279aa254fba55c77324306113cc46b2bbb9316cf938b7d3b7e3fb5960da26577e7d7d1e1c88274c97736a7ffea8d72057abb544f98a6103bc28607c3f2bd4acdf7f593881f7478722552e6d7a9354f4d69812babd38d4f7bdf56c49062b645cc0608d63e62aae330ce82b7fea18153c749e417b96dd2413d21ccf30fa705", 0x89}, {&(0x7f0000000580)='\'', 0x1}, {&(0x7f0000000840)="5cb781833918c5ec33414a59a73e171f3d1b059d548bad14498f8181238c23417375515f55340709641e2c28278173e67aeb6c1e4415c70d11a9caa21dd9c95298425e2a898e9be3cf375c9444eca8cf2a1485cb03ddee677be1fda76fcb5b5c969c53c82aa361436dd61942c0d46398b8f3e1bfc7eec2f6735fe7099bf884420f91e0ac378cc8e17c30c46b3262dfe5371de7ec79049c7a59a1c027fc79c240e2f105c107e5f229a128bbcec774eb44589af8d89324f6ca97518e68d1e6c0ff9e7e1881cb3f62b9e86eca9e733c6712503580ad7e358337", 0xd8}], 0x6, &(0x7f00000009c0)=[{0x88, 0xff, 0x3f, "19bcadcdd8de2ac31b692e0a6702ea238fcd10e68a00eac635e4a379035189bf6d20ce7a8c2c540e1d6a0d46fa06f32b68d7971ee610899209050bf1c33aba4e930fbde40f17f92811597a4b882162796b45aa6d10346a327f5f3d6bb3a1e53c61f6fbfa074bf7371f7fd53bbc69940ee0ee582bce828ca9"}, {0x98, 0x18f, 0x101, "95b21e5cdc26b8284854ec96bc47777c6ff364ed3ed786786363301f272008978a592ca575c8c04745ed6852fb731259043733fb1c875ab9a124b22696ed27924dc63fb62ef4a5555f3ae5d06bb01d1ed3d9364ef02bd8f8779e25c2a6f11c241d70999057c2ea3c638501b387956541c7380c6ec768c3b38f7248a3dd9cb8a14ce1bd"}, {0xc8, 0x10e, 0x800, "afaf0c8b9eddf7819daaea0d1c3f156146543a5edcf4df3c8a594db22b6b9c7281c0dc2e91e27f6b4dedcbd59e26e487683b3565975487d019fe4ab1495489ea18ed388bbc3cab190ad9611aed9871b7f44b23a051a07a8d7f95f4e3664c3bfb2fab85107c3756bff6825afa142fa28575c1a4c8c52bf9386ac1d2e9e524a089c00fa7d72593ae3b7bec3052b80ac2e56ff8ef556e50595d1c9b3f7075d9e9ca3ee261dcf26f039f514fe328bda0ae90b8fe02d361"}, {0xc0, 0x13b, 0x1, "5ddc09f71f48b6a2a8bbe9ad70f2816b92292fb0f2c7bb6d1284a9af8c14a95f7f2a7103f9770444013277f3c7c720ad702a55b4e1c84f0acbe964059931648cc4af202a9836091327e3ddf37d249a51e339d6cf14c2a0b4a56ece7d322c1439fd5b0d6007c9bb069a99353be5be27ee7fc7632cea837103877f4b6f05b66dd292a966e8259218065e172c6815db09a1b9c6a4ae042d692f2bd32372a1bb810843cba3cc163e0215b2e0"}, {0x18, 0x1ff, 0xd9, "caa9d4b7ee33f2"}, {0x80, 0x117, 0x0, "1bcf9ef55876fc261bf74fa1774e93da03fb4258fc366b6fe134c17601e0b12d2c6d346030d180e86e311d628612c7fc5eb70c60d33d28a630a7c1f2a50b073902c220679ca33965036129e0e6e658d001b528552beb8d3aa5b247166ed505f5f2324b3e656d97fda6894dcbfe54a88c"}, {0xe8, 0x29, 0x3, "8b97e7f7a443f2a4c57ff771eee49293fa1150fdd09fd464afc88c61c5774b5feba2509caeca541df89c6b4ebdba222f9a7cadf7345d472f27e07af5b9a6641c041151972aedfb3ab6ff0f17d32883ccdc172266a77fb1484258ee3b856f403469c6db1a5efd22082d2563f02d804f535a282c6c5ad29d2d7f4a7df7895876ba7dee446d62fd5c8808323d699e3630b34da6ba74dc3efd8a26a9ff0f450f6edd10427342c9ef0d678290373c6282a76b10e047877d1707ec22ef8e5a4401236ee3f2c12b4c3dc035c879de49b862c82ff0b669c9ca9f"}, {0x110, 0x105, 0x2, "4b735a19365436b22d1d5168c6a0c57604e494a8f36044099544812f66220d458e5f884f9f609c29743de7168c8c9555a0337e859154804de9c30d369a19aace4004ed93bb90facf84567783fa734a21fbeb004bb01cd83b58176fa0b050f03115f6619c5a675eb3fb11ef3084c0a20a69b63576de5cd90d25d2ed08233fb605774901b2734ae055815d04f9a2e1f43ebe6796da1517b90a8210f7e16a8bc7b68a38184f1bec2136ca1702bb807e09a3e6bf335c16000c6344ad9a4a43c8b56398c828af5c2ea3e2ab8e53122f3a1932e07ecbc47b869593da7ec1924def435b0fbb4ea936a53f49649f44dabfeb7716d67debbd6aff032cf32880ce"}, {0x80, 0x10e, 0x8, "1b3bbb85137307c7b67ccaf39a14d268c92e3aad70764d9f3110a6abc55a9589a48e7077c9a4b201e70b7b77abc10e61675dfae0819ebb54b433c6fc62262391988e830f0a2aaadad37fae2f6ae4d37a1460fc85adaca26f87adf0d342026f21b511cb6ea455d50e484d"}, {0x28, 0x117, 0x3, "636a94dc32b5227995019d2d1a214f7dd2"}], 0x5e0}, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xf039, @local, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @remote, 0x101}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0xc0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="51c880468d1dfd8580feb0818202a38b627a2ab693fa9326fc390a2bd9f50a43b9cc50c82288ecda9cb3be39747d90d2a384ba1c4ef0f3175c38779c7cc8f17acb1fb6847be88a459547b5e4f086552bcf15ca07c6d21c275034d3e9fbe0abfb40b9"], 0x62) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000001380)=0x1000) write$cgroup_pid(r4, &(0x7f0000000000), 0xfffffea6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000003c0)={0x1, 0x10001, 0x22, 0xcf04}) execveat(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000001140)=[&(0x7f0000000fc0)='md5sum*\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='TIPC\x00', &(0x7f0000001080)='memory.events\x00', &(0x7f00000010c0)='wlan0\x00', &(0x7f0000001100)='memory.events\x00'], &(0x7f0000001340)=[&(0x7f0000001180)='nodev[\x00', &(0x7f00000011c0)='ppp0@:\x00', &(0x7f0000001200)='syz1\x00', &(0x7f0000001240)='cpuset:$^posix_acl_access[^vboxnet1\x00', &(0x7f0000001280)='memory.events\x00', &(0x7f00000012c0)='\'\x00', &(0x7f0000001300)='TIPC\x00'], 0x400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000440)={&(0x7f00000013c0)={0xc, r6, 0x100, 0x70bd2c, 0x259fdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'sy~1\x00'}}, [""]}, 0x28}}, 0x24040000) 21:05:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x200000) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x9}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) unshare(0x40000000) 21:05:00 executing program 2: r0 = socket$kcm(0x2, 0x20000000002, 0x73) recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="148d54a8d627360ea111f930eefbfb6ac7f586b84ef3f3ba0d483591cacc0ac73c913c788a7546c195691cdc55fc41e5ac704f66878689a63c9394865657e09d19629018840e1bee4ecaadc41c63562b6caf06d7084508b85af5f5b080d07b47d48930c1073a59e29c6008acd53d13cc06f159", 0x73}, {&(0x7f0000000680)="7422542c4a17931124ba452acb5f83d11ba1d8ce6e653738a0e21e2b36a7c11368f27911277536ec52e7bcdb34e9438570f25011aaeaa4c62feacaedecb3a8341cfa0862a99a80967705853539d812d00323373da008f208410bfdec56f1c734c6f74b2fede85e81541945b682a27a0b6a845252755c9626f7659b67237001b159d1bea6b88cbb85dc26e7c2004589645f1eb18b534f715d39af1e015485e3a5b99c746e29b4c1218eef61a7636637e09b0d60a0717f424deed2d55415e46973cc281f15ab3d4c666a514d7c754b029f935755f3a6c987614f0b644b0a9890df20e47a2ff8", 0xe5}, {&(0x7f0000000540)}, {&(0x7f0000000780)="d891b843d2bb98469ff99f279aa254fba55c77324306113cc46b2bbb9316cf938b7d3b7e3fb5960da26577e7d7d1e1c88274c97736a7ffea8d72057abb544f98a6103bc28607c3f2bd4acdf7f593881f7478722552e6d7a9354f4d69812babd38d4f7bdf56c49062b645cc0608d63e62aae330ce82b7fea18153c749e417b96dd2413d21ccf30fa705", 0x89}, {&(0x7f0000000580)='\'', 0x1}, {&(0x7f0000000840)="5cb781833918c5ec33414a59a73e171f3d1b059d548bad14498f8181238c23417375515f55340709641e2c28278173e67aeb6c1e4415c70d11a9caa21dd9c95298425e2a898e9be3cf375c9444eca8cf2a1485cb03ddee677be1fda76fcb5b5c969c53c82aa361436dd61942c0d46398b8f3e1bfc7eec2f6735fe7099bf884420f91e0ac378cc8e17c30c46b3262dfe5371de7ec79049c7a59a1c027fc79c240e2f105c107e5f229a128bbcec774eb44589af8d89324f6ca97518e68d1e6c0ff9e7e1881cb3f62b9e86eca9e733c6712503580ad7e358337", 0xd8}], 0x6, &(0x7f00000009c0)=[{0x88, 0xff, 0x3f, "19bcadcdd8de2ac31b692e0a6702ea238fcd10e68a00eac635e4a379035189bf6d20ce7a8c2c540e1d6a0d46fa06f32b68d7971ee610899209050bf1c33aba4e930fbde40f17f92811597a4b882162796b45aa6d10346a327f5f3d6bb3a1e53c61f6fbfa074bf7371f7fd53bbc69940ee0ee582bce828ca9"}, {0x98, 0x18f, 0x101, "95b21e5cdc26b8284854ec96bc47777c6ff364ed3ed786786363301f272008978a592ca575c8c04745ed6852fb731259043733fb1c875ab9a124b22696ed27924dc63fb62ef4a5555f3ae5d06bb01d1ed3d9364ef02bd8f8779e25c2a6f11c241d70999057c2ea3c638501b387956541c7380c6ec768c3b38f7248a3dd9cb8a14ce1bd"}, {0xc8, 0x10e, 0x800, "afaf0c8b9eddf7819daaea0d1c3f156146543a5edcf4df3c8a594db22b6b9c7281c0dc2e91e27f6b4dedcbd59e26e487683b3565975487d019fe4ab1495489ea18ed388bbc3cab190ad9611aed9871b7f44b23a051a07a8d7f95f4e3664c3bfb2fab85107c3756bff6825afa142fa28575c1a4c8c52bf9386ac1d2e9e524a089c00fa7d72593ae3b7bec3052b80ac2e56ff8ef556e50595d1c9b3f7075d9e9ca3ee261dcf26f039f514fe328bda0ae90b8fe02d361"}, {0xc0, 0x13b, 0x1, "5ddc09f71f48b6a2a8bbe9ad70f2816b92292fb0f2c7bb6d1284a9af8c14a95f7f2a7103f9770444013277f3c7c720ad702a55b4e1c84f0acbe964059931648cc4af202a9836091327e3ddf37d249a51e339d6cf14c2a0b4a56ece7d322c1439fd5b0d6007c9bb069a99353be5be27ee7fc7632cea837103877f4b6f05b66dd292a966e8259218065e172c6815db09a1b9c6a4ae042d692f2bd32372a1bb810843cba3cc163e0215b2e0"}, {0x18, 0x1ff, 0xd9, "caa9d4b7ee33f2"}, {0x80, 0x117, 0x0, "1bcf9ef55876fc261bf74fa1774e93da03fb4258fc366b6fe134c17601e0b12d2c6d346030d180e86e311d628612c7fc5eb70c60d33d28a630a7c1f2a50b073902c220679ca33965036129e0e6e658d001b528552beb8d3aa5b247166ed505f5f2324b3e656d97fda6894dcbfe54a88c"}, {0xe8, 0x29, 0x3, "8b97e7f7a443f2a4c57ff771eee49293fa1150fdd09fd464afc88c61c5774b5feba2509caeca541df89c6b4ebdba222f9a7cadf7345d472f27e07af5b9a6641c041151972aedfb3ab6ff0f17d32883ccdc172266a77fb1484258ee3b856f403469c6db1a5efd22082d2563f02d804f535a282c6c5ad29d2d7f4a7df7895876ba7dee446d62fd5c8808323d699e3630b34da6ba74dc3efd8a26a9ff0f450f6edd10427342c9ef0d678290373c6282a76b10e047877d1707ec22ef8e5a4401236ee3f2c12b4c3dc035c879de49b862c82ff0b669c9ca9f"}, {0x110, 0x105, 0x2, "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"}, {0x80, 0x10e, 0x8, "1b3bbb85137307c7b67ccaf39a14d268c92e3aad70764d9f3110a6abc55a9589a48e7077c9a4b201e70b7b77abc10e61675dfae0819ebb54b433c6fc62262391988e830f0a2aaadad37fae2f6ae4d37a1460fc85adaca26f87adf0d342026f21b511cb6ea455d50e484d"}, {0x28, 0x117, 0x3, "636a94dc32b5227995019d2d1a214f7dd2"}], 0x5e0}, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xf039, @local, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @remote, 0x101}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0xc0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="51c880468d1dfd8580feb0818202a38b627a2ab693fa9326fc390a2bd9f50a43b9cc50c82288ecda9cb3be39747d90d2a384ba1c4ef0f3175c38779c7cc8f17acb1fb6847be88a459547b5e4f086552bcf15ca07c6d21c275034d3e9fbe0abfb40b9"], 0x62) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000001380)=0x1000) write$cgroup_pid(r4, &(0x7f0000000000), 0xfffffea6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000003c0)={0x1, 0x10001, 0x22, 0xcf04}) execveat(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000001140)=[&(0x7f0000000fc0)='md5sum*\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='TIPC\x00', &(0x7f0000001080)='memory.events\x00', &(0x7f00000010c0)='wlan0\x00', &(0x7f0000001100)='memory.events\x00'], &(0x7f0000001340)=[&(0x7f0000001180)='nodev[\x00', &(0x7f00000011c0)='ppp0@:\x00', &(0x7f0000001200)='syz1\x00', &(0x7f0000001240)='cpuset:$^posix_acl_access[^vboxnet1\x00', &(0x7f0000001280)='memory.events\x00', &(0x7f00000012c0)='\'\x00', &(0x7f0000001300)='TIPC\x00'], 0x400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000440)={&(0x7f00000013c0)={0xc, r6, 0x100, 0x70bd2c, 0x259fdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'sy~1\x00'}}, [""]}, 0x28}}, 0x24040000) 21:05:00 executing program 3: r0 = socket$kcm(0x2, 0x20000000002, 0x73) recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="148d54a8d627360ea111f930eefbfb6ac7f586b84ef3f3ba0d483591cacc0ac73c913c788a7546c195691cdc55fc41e5ac704f66878689a63c9394865657e09d19629018840e1bee4ecaadc41c63562b6caf06d7084508b85af5f5b080d07b47d48930c1073a59e29c6008acd53d13cc06f159", 0x73}, {&(0x7f0000000680)="7422542c4a17931124ba452acb5f83d11ba1d8ce6e653738a0e21e2b36a7c11368f27911277536ec52e7bcdb34e9438570f25011aaeaa4c62feacaedecb3a8341cfa0862a99a80967705853539d812d00323373da008f208410bfdec56f1c734c6f74b2fede85e81541945b682a27a0b6a845252755c9626f7659b67237001b159d1bea6b88cbb85dc26e7c2004589645f1eb18b534f715d39af1e015485e3a5b99c746e29b4c1218eef61a7636637e09b0d60a0717f424deed2d55415e46973cc281f15ab3d4c666a514d7c754b029f935755f3a6c987614f0b644b0a9890df20e47a2ff8", 0xe5}, {&(0x7f0000000540)}, {&(0x7f0000000780)="d891b843d2bb98469ff99f279aa254fba55c77324306113cc46b2bbb9316cf938b7d3b7e3fb5960da26577e7d7d1e1c88274c97736a7ffea8d72057abb544f98a6103bc28607c3f2bd4acdf7f593881f7478722552e6d7a9354f4d69812babd38d4f7bdf56c49062b645cc0608d63e62aae330ce82b7fea18153c749e417b96dd2413d21ccf30fa705", 0x89}, {&(0x7f0000000580)='\'', 0x1}, {&(0x7f0000000840)="5cb781833918c5ec33414a59a73e171f3d1b059d548bad14498f8181238c23417375515f55340709641e2c28278173e67aeb6c1e4415c70d11a9caa21dd9c95298425e2a898e9be3cf375c9444eca8cf2a1485cb03ddee677be1fda76fcb5b5c969c53c82aa361436dd61942c0d46398b8f3e1bfc7eec2f6735fe7099bf884420f91e0ac378cc8e17c30c46b3262dfe5371de7ec79049c7a59a1c027fc79c240e2f105c107e5f229a128bbcec774eb44589af8d89324f6ca97518e68d1e6c0ff9e7e1881cb3f62b9e86eca9e733c6712503580ad7e358337", 0xd8}], 0x6, &(0x7f00000009c0)=[{0x88, 0xff, 0x3f, "19bcadcdd8de2ac31b692e0a6702ea238fcd10e68a00eac635e4a379035189bf6d20ce7a8c2c540e1d6a0d46fa06f32b68d7971ee610899209050bf1c33aba4e930fbde40f17f92811597a4b882162796b45aa6d10346a327f5f3d6bb3a1e53c61f6fbfa074bf7371f7fd53bbc69940ee0ee582bce828ca9"}, {0x98, 0x18f, 0x101, "95b21e5cdc26b8284854ec96bc47777c6ff364ed3ed786786363301f272008978a592ca575c8c04745ed6852fb731259043733fb1c875ab9a124b22696ed27924dc63fb62ef4a5555f3ae5d06bb01d1ed3d9364ef02bd8f8779e25c2a6f11c241d70999057c2ea3c638501b387956541c7380c6ec768c3b38f7248a3dd9cb8a14ce1bd"}, {0xc8, 0x10e, 0x800, "afaf0c8b9eddf7819daaea0d1c3f156146543a5edcf4df3c8a594db22b6b9c7281c0dc2e91e27f6b4dedcbd59e26e487683b3565975487d019fe4ab1495489ea18ed388bbc3cab190ad9611aed9871b7f44b23a051a07a8d7f95f4e3664c3bfb2fab85107c3756bff6825afa142fa28575c1a4c8c52bf9386ac1d2e9e524a089c00fa7d72593ae3b7bec3052b80ac2e56ff8ef556e50595d1c9b3f7075d9e9ca3ee261dcf26f039f514fe328bda0ae90b8fe02d361"}, {0xc0, 0x13b, 0x1, "5ddc09f71f48b6a2a8bbe9ad70f2816b92292fb0f2c7bb6d1284a9af8c14a95f7f2a7103f9770444013277f3c7c720ad702a55b4e1c84f0acbe964059931648cc4af202a9836091327e3ddf37d249a51e339d6cf14c2a0b4a56ece7d322c1439fd5b0d6007c9bb069a99353be5be27ee7fc7632cea837103877f4b6f05b66dd292a966e8259218065e172c6815db09a1b9c6a4ae042d692f2bd32372a1bb810843cba3cc163e0215b2e0"}, {0x18, 0x1ff, 0xd9, "caa9d4b7ee33f2"}, {0x80, 0x117, 0x0, "1bcf9ef55876fc261bf74fa1774e93da03fb4258fc366b6fe134c17601e0b12d2c6d346030d180e86e311d628612c7fc5eb70c60d33d28a630a7c1f2a50b073902c220679ca33965036129e0e6e658d001b528552beb8d3aa5b247166ed505f5f2324b3e656d97fda6894dcbfe54a88c"}, {0xe8, 0x29, 0x3, "8b97e7f7a443f2a4c57ff771eee49293fa1150fdd09fd464afc88c61c5774b5feba2509caeca541df89c6b4ebdba222f9a7cadf7345d472f27e07af5b9a6641c041151972aedfb3ab6ff0f17d32883ccdc172266a77fb1484258ee3b856f403469c6db1a5efd22082d2563f02d804f535a282c6c5ad29d2d7f4a7df7895876ba7dee446d62fd5c8808323d699e3630b34da6ba74dc3efd8a26a9ff0f450f6edd10427342c9ef0d678290373c6282a76b10e047877d1707ec22ef8e5a4401236ee3f2c12b4c3dc035c879de49b862c82ff0b669c9ca9f"}, {0x110, 0x105, 0x2, "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"}, {0x80, 0x10e, 0x8, "1b3bbb85137307c7b67ccaf39a14d268c92e3aad70764d9f3110a6abc55a9589a48e7077c9a4b201e70b7b77abc10e61675dfae0819ebb54b433c6fc62262391988e830f0a2aaadad37fae2f6ae4d37a1460fc85adaca26f87adf0d342026f21b511cb6ea455d50e484d"}, {0x28, 0x117, 0x3, "636a94dc32b5227995019d2d1a214f7dd2"}], 0x5e0}, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xf039, @local, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @remote, 0x101}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0xc0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="51c880468d1dfd8580feb0818202a38b627a2ab693fa9326fc390a2bd9f50a43b9cc50c82288ecda9cb3be39747d90d2a384ba1c4ef0f3175c38779c7cc8f17acb1fb6847be88a459547b5e4f086552bcf15ca07c6d21c275034d3e9fbe0abfb40b9"], 0x62) write$cgroup_pid(r4, &(0x7f0000000280), 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000001380)=0x1000) write$cgroup_pid(r4, &(0x7f0000000000), 0xfffffea6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000003c0)={0x1, 0x10001, 0x22, 0xcf04}) execveat(r3, &(0x7f0000000540)='./file0\x00', &(0x7f0000001140)=[&(0x7f0000000fc0)='md5sum*\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='TIPC\x00', &(0x7f0000001080)='memory.events\x00', &(0x7f00000010c0)='wlan0\x00', &(0x7f0000001100)='memory.events\x00'], &(0x7f0000001340)=[&(0x7f0000001180)='nodev[\x00', &(0x7f00000011c0)='ppp0@:\x00', &(0x7f0000001200)='syz1\x00', &(0x7f0000001240)='cpuset:$^posix_acl_access[^vboxnet1\x00', &(0x7f0000001280)='memory.events\x00', &(0x7f00000012c0)='\'\x00', &(0x7f0000001300)='TIPC\x00'], 0x400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000440)={&(0x7f00000013c0)={0xc, r6, 0x100, 0x70bd2c, 0x259fdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'sy~1\x00'}}, [""]}, 0x28}}, 0x24040000) 21:05:00 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(r4, 0x0, 0x24e) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0xfe) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r7, &(0x7f0000000240)={0x67446698, 0x0, 0x0, 0x0, 0x0, "6517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d060a35efd21affe238385d4de98c35d691bbbf35c5601687a77cfa847a"}, 0x4a) sendfile(r7, r7, &(0x7f0000000200), 0xa198) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write(r5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x4000000000000b9, 0x8050) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x401, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000140)={r3}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) 21:05:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000480)="2e829b6e3941e0db6478a2d5124eed1c558f7ee2a39c7ccde3d90a3b283f2aac6750611bc4ee73c02c968f56c2ecb2a44078e22c2f624cdb16b817314ddcdd6eef2860112118074cdff2d472c3cb41635eda3831614928fd1f708cdc39b533816ffddc842cadb8e04c3d8784c9cfce8703a7253f0d84cb6a9eba6dbb47f1c821d7592bcca039d0", 0x87}, {&(0x7f0000000580)="225ab9fe0dd6c97c578bc454354042be660906d8a6fa8add30ebb1147ed0f6a1f37de7370435438752e9111ad74117ea6e18e0f64b27d7ec5ecb1bba432820d8f54efd15908a360b29ecd21776c6229b7c52c265365bebe456eb75ff8f23b4a353daa8772ffd74995ed63670b4a1d4a303970588b75213c91e880ceaed06d5d49c8e0625d23718c7101f7e436b8ab537f750047c33c1966af07a6850481e3c6b86fa0e6b4199ce1d612d89684348ce75e426", 0xb2}, {&(0x7f0000000700)="1295426cf38f99f6290dcbdb90c74f7a0b881177dee4c6e26643e7c41f734c6440e671f97d35aa338ebc399de0069a6c660a4f69b3874b29fe7f71ea7ed4d0b5de0a7cdb769db816c3dfc59d93633f0294a8dc5472e7e4f6838d15ffa49a6ae99d2ea55c43afc8d0c4d8e03ab4a6ad328c1d0386ceadb1f63090c4e08a321f1fbf394dc9bfb2c03812a52f4ca0ada5b7a4464048ea00401f2d9517f92b332483de3edf24eecd012afa13f8c0d52df8", 0xaf}, {&(0x7f0000000880)="43bbeca7b3a842d3d67ccf91348411101546d9699dc7b398d6ae7df66ef5a3adb2f1b14a664ad5798d51ff45baf1c224491414223d9e508b3e07c1728eff4ee947317f933e66ba62706838cf7656376933dc083d793c0041e903c01c56d711d4226ed542db1a1792d5d69e3ddad6a88d2480b01fc4a146dee5bcd66d6169bacf64549d19b1771767c674c5203047d4b76c6a2da2fa0b56940fc8ad6a8774f556eda90ad9ea932c7bf7f6eb6f41adf2bc09ed758aef30d6756288c36fdbcd477766d6be8dd8c5f03565bd7469d92fa189fa88b27c6592436d1848aa5900a622675f8dd7447e2bd6cd13eb949175c78ffd720ce824d0b0c9", 0xf7}, {&(0x7f0000000640)="b22940fb4c5b966be84203416db97a01c7add3f3fd6a282f6d0125839ee4c75464069669c89863ff57f440dfdf9e06ef8e744296cd8f0b7d0c6b8e8e6bae6fdb4e15d64427cd4d36e72c9903c0eb0790c926a8e9eb323f32a77f23621b5eb54b11b0fe74cbd1c70a1278f11b10a3448008", 0x71}], 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000007c0)={r3, r4, 0xdd}) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000006c0)) syz_mount_image$vfat(0x0, 0x0, 0x800000000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x15d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) flock(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a80), 0x8, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xe) close(0xffffffffffffffff) [ 168.510888] IPVS: ftp: loaded support on port[0] = 21 21:05:00 executing program 2: memfd_create(0x0, 0x0) getpgrp(0x0) getrandom(0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x5, 0x2}, @sack_perm, @mss={0x2, 0x2}], 0x3) msgctl$IPC_STAT(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) 21:05:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000800100000000000a6d9512f1d06c030cdf44482ca5e36d3790b80d960b2bef2cbdfc1b2b5413a1dfa9e4571465685d96c0056d904a7ae1f5d7c8c6785b56e65cef39192994c9fc5668828f243df"], 0x24}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x2}, &(0x7f0000000080)=0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x9, 0x64899bc2, 0x8, 'queue0\x00', 0x1}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x8000, 0x5, 0x20, 0x400, 0xf60e, 0x251aa4ce, r2}, &(0x7f0000000100)=0x20) 21:05:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @null, @default, @rose, @remote, @bcast, @rose, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x4}, 0x8) close(r2) 21:05:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x240000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7, @mcast1, 0x3f}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x18}}, 0x1f, [0x2, 0x9, 0x3d, 0x81, 0x4, 0xd41, 0x6, 0xfffffffffffffffd]}, 0x5c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x480, 0x0, 0xd07ee511}]}) 21:05:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000480)="2e829b6e3941e0db6478a2d5124eed1c558f7ee2a39c7ccde3d90a3b283f2aac6750611bc4ee73c02c968f56c2ecb2a44078e22c2f624cdb16b817314ddcdd6eef2860112118074cdff2d472c3cb41635eda3831614928fd1f708cdc39b533816ffddc842cadb8e04c3d8784c9cfce8703a7253f0d84cb6a9eba6dbb47f1c821d7592bcca039d0", 0x87}, {&(0x7f0000000580)="225ab9fe0dd6c97c578bc454354042be660906d8a6fa8add30ebb1147ed0f6a1f37de7370435438752e9111ad74117ea6e18e0f64b27d7ec5ecb1bba432820d8f54efd15908a360b29ecd21776c6229b7c52c265365bebe456eb75ff8f23b4a353daa8772ffd74995ed63670b4a1d4a303970588b75213c91e880ceaed06d5d49c8e0625d23718c7101f7e436b8ab537f750047c33c1966af07a6850481e3c6b86fa0e6b4199ce1d612d89684348ce75e426", 0xb2}, {&(0x7f0000000700)="1295426cf38f99f6290dcbdb90c74f7a0b881177dee4c6e26643e7c41f734c6440e671f97d35aa338ebc399de0069a6c660a4f69b3874b29fe7f71ea7ed4d0b5de0a7cdb769db816c3dfc59d93633f0294a8dc5472e7e4f6838d15ffa49a6ae99d2ea55c43afc8d0c4d8e03ab4a6ad328c1d0386ceadb1f63090c4e08a321f1fbf394dc9bfb2c03812a52f4ca0ada5b7a4464048ea00401f2d9517f92b332483de3edf24eecd012afa13f8c0d52df8", 0xaf}, {&(0x7f0000000880)="43bbeca7b3a842d3d67ccf91348411101546d9699dc7b398d6ae7df66ef5a3adb2f1b14a664ad5798d51ff45baf1c224491414223d9e508b3e07c1728eff4ee947317f933e66ba62706838cf7656376933dc083d793c0041e903c01c56d711d4226ed542db1a1792d5d69e3ddad6a88d2480b01fc4a146dee5bcd66d6169bacf64549d19b1771767c674c5203047d4b76c6a2da2fa0b56940fc8ad6a8774f556eda90ad9ea932c7bf7f6eb6f41adf2bc09ed758aef30d6756288c36fdbcd477766d6be8dd8c5f03565bd7469d92fa189fa88b27c6592436d1848aa5900a622675f8dd7447e2bd6cd13eb949175c78ffd720ce824d0b0c9", 0xf7}, {&(0x7f0000000640)="b22940fb4c5b966be84203416db97a01c7add3f3fd6a282f6d0125839ee4c75464069669c89863ff57f440dfdf9e06ef8e744296cd8f0b7d0c6b8e8e6bae6fdb4e15d64427cd4d36e72c9903c0eb0790c926a8e9eb323f32a77f23621b5eb54b11b0fe74cbd1c70a1278f11b10a3448008", 0x71}], 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000007c0)={r3, r4, 0xdd}) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000006c0)) syz_mount_image$vfat(0x0, 0x0, 0x800000000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x15d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) flock(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a80), 0x8, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xe) close(0xffffffffffffffff) [ 168.686442] audit: type=1804 audit(1564520701.007:45): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir612002003/syzkaller.TpgME9/4/file0/file0" dev="loop4" ino=3 res=1 21:05:03 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2132fadf71ca07314385015c14a06ee6f5e3f2faa827a2459e7f04a10200000083f7c39ade3facc99b40005bcf32da69d9c485b3ab14f06d6e"], 0x1}}, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220000, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x6, {0x6, 0x4, 0x0, 0x3f, 0x7, 0x7}}) 21:05:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="11dca5055e0bcfe47bf070") r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x779, 0x1}, 0xc) socketpair(0x4, 0x80e, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x1}, 0x1) socket(0x40000000001e, 0x1, 0x0) 21:05:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000480)="2e829b6e3941e0db6478a2d5124eed1c558f7ee2a39c7ccde3d90a3b283f2aac6750611bc4ee73c02c968f56c2ecb2a44078e22c2f624cdb16b817314ddcdd6eef2860112118074cdff2d472c3cb41635eda3831614928fd1f708cdc39b533816ffddc842cadb8e04c3d8784c9cfce8703a7253f0d84cb6a9eba6dbb47f1c821d7592bcca039d0", 0x87}, {&(0x7f0000000580)="225ab9fe0dd6c97c578bc454354042be660906d8a6fa8add30ebb1147ed0f6a1f37de7370435438752e9111ad74117ea6e18e0f64b27d7ec5ecb1bba432820d8f54efd15908a360b29ecd21776c6229b7c52c265365bebe456eb75ff8f23b4a353daa8772ffd74995ed63670b4a1d4a303970588b75213c91e880ceaed06d5d49c8e0625d23718c7101f7e436b8ab537f750047c33c1966af07a6850481e3c6b86fa0e6b4199ce1d612d89684348ce75e426", 0xb2}, {&(0x7f0000000700)="1295426cf38f99f6290dcbdb90c74f7a0b881177dee4c6e26643e7c41f734c6440e671f97d35aa338ebc399de0069a6c660a4f69b3874b29fe7f71ea7ed4d0b5de0a7cdb769db816c3dfc59d93633f0294a8dc5472e7e4f6838d15ffa49a6ae99d2ea55c43afc8d0c4d8e03ab4a6ad328c1d0386ceadb1f63090c4e08a321f1fbf394dc9bfb2c03812a52f4ca0ada5b7a4464048ea00401f2d9517f92b332483de3edf24eecd012afa13f8c0d52df8", 0xaf}, {&(0x7f0000000880)="43bbeca7b3a842d3d67ccf91348411101546d9699dc7b398d6ae7df66ef5a3adb2f1b14a664ad5798d51ff45baf1c224491414223d9e508b3e07c1728eff4ee947317f933e66ba62706838cf7656376933dc083d793c0041e903c01c56d711d4226ed542db1a1792d5d69e3ddad6a88d2480b01fc4a146dee5bcd66d6169bacf64549d19b1771767c674c5203047d4b76c6a2da2fa0b56940fc8ad6a8774f556eda90ad9ea932c7bf7f6eb6f41adf2bc09ed758aef30d6756288c36fdbcd477766d6be8dd8c5f03565bd7469d92fa189fa88b27c6592436d1848aa5900a622675f8dd7447e2bd6cd13eb949175c78ffd720ce824d0b0c9", 0xf7}, {&(0x7f0000000640)="b22940fb4c5b966be84203416db97a01c7add3f3fd6a282f6d0125839ee4c75464069669c89863ff57f440dfdf9e06ef8e744296cd8f0b7d0c6b8e8e6bae6fdb4e15d64427cd4d36e72c9903c0eb0790c926a8e9eb323f32a77f23621b5eb54b11b0fe74cbd1c70a1278f11b10a3448008", 0x71}], 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000007c0)={r3, r4, 0xdd}) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000006c0)) syz_mount_image$vfat(0x0, 0x0, 0x800000000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="004273003c84196e24533c31f005e22dd751d6974f6dca86da95f3fbcafb95df18228e84fd9c53b1a616ed68e8d669631913010001003aaecd2d0500c5c83cf680c8f0bde46dcf37d51056edc1d30c82f43fcc4d2467bd17af5e06a104318aa361d644d58dbd658465f965513f3a907bf651e2ba412e0cd67fe6ef5bf1ebaefe4afc27d186fd5173bfe405555c189f867a15931e412e88c65593d2ee2f8b1d2c4a02b82ea0c7ff119ddd55463a4d7eaed0695312c5f9aa08f2b41eef866c68f5584c627e01bf4ca72654ec6774c501040000b66ce97c49ce33643927a54628bb631eaa1eebbee176e687c65d5fc440c5753f3641f3296237fb47038784cabeae7f148937523851f73628fee8934e94ae19066b213aa849b8fdd58cefa65ad216f018e653b4a972cd904df6e926dbfa41dcf58b2b573bb68679e27775e47a9a7a6f494b16b9c07da3e48d34dc29426477c219399062cee9a94c637d47a1"], 0x15d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) flock(0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a80), 0x8, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xe) close(0xffffffffffffffff) 21:05:03 executing program 2: memfd_create(0x0, 0x0) getpgrp(0x0) getrandom(0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x5, 0x2}, @sack_perm, @mss={0x2, 0x2}], 0x3) msgctl$IPC_STAT(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) 21:05:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:03 executing program 3: memfd_create(0x0, 0x0) getpgrp(0x0) getrandom(0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x5, 0x2}, @sack_perm, @mss={0x2, 0x2}], 0x3) msgctl$IPC_STAT(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) 21:05:03 executing program 4: memfd_create(0x0, 0x0) getpgrp(0x0) getrandom(0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x5, 0x2}, @sack_perm, @mss={0x2, 0x2}], 0x3) msgctl$IPC_STAT(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) 21:05:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f00000000c0)="11dca50d563fa395735173a54cd3866a2e24450bcf637bf070ded67ea5c640023b3248b5793342f6f5c9c3cab875b394ef65915aaf542b4ad728645c3e2a172c2f4d6ba02ad7850e01f5f190023173ea60f50f50f6fac0d4dbff1de5aff061d0a71afa28dc1b344a53e4acf0bba54295ef0b2639e571ffc78d2c837796530f25ce4f05028467b584") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x46b0, 0x0) getpeername$netrom(r1, &(0x7f0000000180)={{0x3, @default}, [@rose, @remote, @null, @rose, @null, @default, @remote, @bcast]}, &(0x7f0000000480)=0x48) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000000f5ffbea30000000000000703000000fefff67a0af0fff8ffffff79a4f0ff00000000b706002002ffffffbd4605000000000045040000010000000404000001000000b7050000220080006a0a00fe00000000850000000a000000b70000001c0000009500000000000000d5208cc963366efdb1fd45d9bf3a217907fa0ac5c8ce709600a3203d73f043fb351cd22ab20da58855222fb12f00bea58b765e3e04276d199318d52afcc6205e81e1aceced867cacd2ddfae3afeb0339231f634613330ff1ef3510f0ab256cf95b2ef37aea96257fbee7"], &(0x7f0000000340)='GPL\x00'}, 0x48) 21:05:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x52) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed0004d89524429adc542c0200000012aac700"/56], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) getpid() syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='TRUE', 0x4, 0x0) 21:05:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) accept4$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e, 0x80000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000440)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000240)={r5, 0x2, 0x2, 0xa6e9, 0x0, 0x7fff, 0x3f5b}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x0, 0x4, 0x7}}, 0xa) write$UHID_INPUT2(r4, &(0x7f0000000080), 0x6) socket(0x15, 0xfffffffffffffffe, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)=0xa22, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") r7 = socket$inet6(0xa, 0x3, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r8 = open(0x0, 0x0, 0x0) ftruncate(r8, 0x87ffd) sendfile(r7, r8, 0x0, 0x800000000024) 21:05:06 executing program 3: uselib(&(0x7f0000000040)='./file0\x00') r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'batadv0\x00'}}, 0x1e) times(&(0x7f0000000100)) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffffffffffffffc, @local, 'ip_vti0\x00'}}, 0x1e) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x102) setns(r3, 0x0) 21:05:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000300)={0x7, 0x9, 0x0, [{0x2, 0xfffffffe00, 0x8, 0x9, 0x0, 0x7, 0x71}, {0x4, 0x1, 0x1, 0x2, 0x7, 0x80000000, 0x8}, {0xd5, 0x2, 0x6, 0x9, 0x1, 0x4, 0x5}, {0x78, 0x6, 0x1, 0x10001, 0x6, 0x1, 0x7}, {0xa27b, 0x10000, 0x1000, 0x6, 0x4, 0x5, 0xff}, {0x3d2, 0x9f, 0xfff, 0x0, 0x99, 0x1, 0x4}, {0x2, 0x6, 0x95f1, 0xffffffff, 0x4, 0x4000000000000000, 0x9}, {0x200, 0x3, 0x2, 0x50, 0x600000000000, 0x1, 0xf093}, {0x7, 0x80, 0xb2970fb, 0x562c42a5, 0x4, 0x4, 0x9}]}) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) ftruncate(r1, 0x39) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) connect$llc(r1, &(0x7f0000000080)={0x1a, 0xf, 0xffffffffffffffff, 0x5, 0x5, 0x2df1, @random="52e4f4cd1b53"}, 0x10) dup2(r0, r1) 21:05:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x1, {0xa8, 0x3}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8}]}}}]}, 0x3c}}, 0x0) 21:05:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x6) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000880)={0x3, 0x0, 0x2080, {0x4, 0x4, 0x2}, [], "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", "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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x501000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000005c0)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x8, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x5, 0x8, 0x9, 0x0, 0xfffffffffffffc00, 0x59fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2e, 0x0, 0x6]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvfrom$netrom(r5, &(0x7f0000002900)=""/4096, 0x1000, 0x21, &(0x7f00000002c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 21:05:06 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x1a00, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RSTAT(r1, &(0x7f0000000100)={0x80, 0x7d, 0x2, {0x0, 0x79, 0x71b6, 0xffffffffffffffe1, {0x59, 0x4, 0x8}, 0x28000000, 0x8, 0x62, 0x3, 0x1e, 'cpusetselinux,vboxnet1+trusted', 0x0, '', 0xd, '/selinux/mls\x00', 0x1b, ':wlan0em1vmnet0\\em1\xe1selinux'}}, 0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r4 = getegid() r5 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) r8 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000d40)={0xf, 0x103, 0x0, {0x8, 0x7ff, 0x0, 0x3ff}}) sendmsg$netlink(r1, &(0x7f0000000940)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000280)=[{&(0x7f00000001c0)={0x98, 0x1f, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="47d88ac4f5e7839b19a0e18649f8f1a96ac781d417e537123beab95149bd438fb902d182af8a3cb57a69a248572e8ea6a2a04e80436d9c9a125cfe0378b8bd419b333dbe611d6fa7b3383901fece39a0ffafc4f22946329c1a4924553a9b948affdc264f699eadacf7282735a0481aa8f2af211ad0d3af0fb4f6ca4b8eb483c9a2cd227e5cefb5"]}, 0x98}], 0x1, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0xf0, 0x8000}, 0x895) r11 = add_key$user(&(0x7f0000000980)='user\x00', &(0x7f00000009c0)={'syz', 0x2}, &(0x7f0000000a00)="0609fe0e2d11715ec4c5a0a288b6f9358e5d6de916909af4de6508e79488595f76e140e944ee5aeda25be36231ae6f28c34131c6f4651f2107944e1a8e5ccc07ea5580a96555bad0db55fbf1091b736527c45dbe53c8b2fc87516f1c3ac5aa6ce41c84ee643284991698fcc785ba48139eccbaeb092b1bb8cd36284efe86c967a8dc24d6f540bfa949dd5440fa352ea06dc962f48985d13c609e8c745a41a3fb86abea973445df24fa78760ea0ae86b725b07ba4600a6338a2864e9d5e3376977a1c2b728883", 0xc6, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000b00)={r11, 0xf8, 0x5b}, &(0x7f0000000b40)={'enc=', 'oaep', ' hash=', {'sha1-ni\x00'}}, &(0x7f0000000bc0)="247f4f3c25531c9dfe76633d3a04243ae5eb451f470991fa58d340e3480eedf006bee537e7266d0e80c091754847c42fd98bdbf93212deeb41114a18cbc2a782092f5c8a887ce4199a23637f32e34c0cf4ae8a35d7d9a3e47edbfba1ec5d655b1925fe65eb2d8ae0b1d87a2d9e2020d6cdef1a3e20bf3130871cc4ae7a100b76e985f1e541c3cfc57109b67befe89ccf6c170fe9e7c43cb7cb93a35afcd028cb1cc56a53dcc76f8e81cab9188effc73abcc363004a4f924a2c662c7ab5910ae72fb55e52eb38cc1f8a29f1a4ac52f82e8d4d14d52d3188d65b04b341580dbce0380f20f1281f3c3095837f9edd663982cee37e066727c067", &(0x7f0000000cc0)=""/91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) shmctl$IPC_RMID(r0, 0x0) 21:05:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x480) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) munlockall() setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x2a2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0xffff, 0x9, 0xa64, 0x7, 0xc4}, &(0x7f0000002580)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000025c0)={r3, @in={{0x2, 0x4e21, @loopback}}}, 0x84) syz_genetlink_get_family_id$fou(0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) 21:05:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x2000000, r0}) 21:05:06 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x10, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_snmp6\x00') openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) [ 173.886294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pig=7309 comm=syz-executor.5 21:05:06 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80800) signalfd4(r1, &(0x7f0000000140)={0x9}, 0x8, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x1c}, 0x46, r4}) pread64(r3, &(0x7f0000000240)=""/136, 0x88, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x6e, 0x200) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000340)=0xb0d) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0xffffff7f, 0x0}}], 0x3fffe64, 0x0) [ 174.329038] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.337747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pig=7309 comm=syz-executor.5 [ 174.393675] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 174.444080] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 174.491957] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 174.535416] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 174.595760] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 174.634089] ip6_vti0: Invalid MTU 140 requested, hw min 1280 21:05:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) io_cancel(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x650, r0, &(0x7f0000000080)="53a2090dfa3951bfbfbbb33521ff5a39e450b909af2c0d6ff396ee95e3c0686ab1d0422ecd49be37214d2bcb889debb58746180efbfe2d9c609eb137b8799891094d4429ef0751facebf617970213f05f2b26984cef81b96efad4e2da89bc0d9a75d83d3365446184c97bd7764a9d6b24ac960643095cff274568bf0c7a190336f61da5c5c99b3b0e955f221bf355543ea4e5e074e3a88d9cd01739c8fd9ed8109e02a1c037eea5d7eb60d552a8991028520a043be3feddfe842a54c225b0e83fbf1ea953c463efdaa", 0xc9, 0xffffffffffffffff, 0x0, 0x2, r2}, &(0x7f0000000300)) ioctl(0xffffffffffffffff, 0x0, 0x0) 21:05:07 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}, 0x800) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x5e21, @multicast1}, 0x10) syz_emit_ethernet(0xfffffffffffffc49, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 174.683127] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.748546] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 174.797869] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 174.854492] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 174.911583] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 174.974004] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 175.025158] ip6_vti0: Invalid MTU 140 requested, hw min 1280 21:05:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x480) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) munlockall() setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x2a2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0xffff, 0x9, 0xa64, 0x7, 0xc4}, &(0x7f0000002580)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000025c0)={r3, @in={{0x2, 0x4e21, @loopback}}}, 0x84) syz_genetlink_get_family_id$fou(0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) 21:05:07 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) io_cancel(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x650, r0, &(0x7f0000000080)="53a2090dfa3951bfbfbbb33521ff5a39e450b909af2c0d6ff396ee95e3c0686ab1d0422ecd49be37214d2bcb889debb58746180efbfe2d9c609eb137b8799891094d4429ef0751facebf617970213f05f2b26984cef81b96efad4e2da89bc0d9a75d83d3365446184c97bd7764a9d6b24ac960643095cff274568bf0c7a190336f61da5c5c99b3b0e955f221bf355543ea4e5e074e3a88d9cd01739c8fd9ed8109e02a1c037eea5d7eb60d552a8991028520a043be3feddfe842a54c225b0e83fbf1ea953c463efdaa", 0xc9, 0xffffffffffffffff, 0x0, 0x2, r2}, &(0x7f0000000300)) ioctl(0xffffffffffffffff, 0x0, 0x0) 21:05:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000001c0)=0x60) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0xfffffffffffffe) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) inotify_init1(0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x480002, 0x0) accept$netrom(r1, &(0x7f0000000340)={{0x3, @rose}, [@netrom, @rose, @default, @rose, @netrom, @netrom, @default]}, &(0x7f0000000280)=0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r2 = request_key(0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000680), 0x0, r2) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x8) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) accept(r4, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, 0x0, 0x0) 21:05:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x6, 0x7, 0xffffffff, 0x7ff, 0x0, 0x4, 0x10000, 0x7, 0xffffffffffffb4e0, 0x5, 0x81a3, 0x8, 0x1, 0xfffffffffffffffd, 0x6, 0x7, 0x8000, 0x0, 0xfff, 0x7, 0x6, 0x7ff, 0x7ff, 0x1, 0x2, 0x9, 0x1000, 0xfff, 0xfff, 0x6, 0xa1a, 0x7f, 0x1, 0x6e, 0x54515706, 0x7, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x100, 0x1f, 0x401, 0x2, 0x4, 0xd1d2, 0x5ba4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'lo\x00'}}, 0x1e) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r3 = accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80800) signalfd4(r1, &(0x7f0000000140)={0x9}, 0x8, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x1c}, 0x46, r4}) pread64(r3, &(0x7f0000000240)=""/136, 0x88, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x6e, 0x200) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000340)=0xb0d) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0xffffff7f, 0x0}}], 0x3fffe64, 0x0) 21:05:07 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:07 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x8) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) accept(r4, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, 0x0, 0x0) 21:05:08 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:08 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, @in6={{0xa, 0x4e21, 0x71e5, @mcast2, 0x5}}, [0x2, 0x3, 0x15ba, 0xaa7d, 0x20, 0x10000, 0x40, 0x3, 0xbdf, 0x6, 0x80000001, 0x80000000, 0x10000, 0x4fa, 0x7]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0x73, "47df3fce761036be73f3a88189bed140a81164cff6ad1993ba8e606e96e23e8e47f5429dfe8449825217f3aed6100ab5387221a936bae184a5e2368b1e383493570f40057999505c3ca0a38398e2a780063b12c08c1b8ae808e7fae67900628b1a2f0ad1b3dd31537987d8d78afcdb199c4464"}, &(0x7f00000001c0)=0x7b) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) 21:05:09 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000001c0)=0x60) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0xfffffffffffffe) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) inotify_init1(0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x480002, 0x0) accept$netrom(r1, &(0x7f0000000340)={{0x3, @rose}, [@netrom, @rose, @default, @rose, @netrom, @netrom, @default]}, &(0x7f0000000280)=0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r2 = request_key(0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000680), 0x0, r2) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r3, 0x0, 0x0, 0x1}}, 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x8) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) accept(r4, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, 0x0, 0x0) 21:05:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:09 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x3f) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) r4 = dup2(0xffffffffffffffff, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x1fd, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) ftruncate(r6, 0x80003) sendfile(r3, r6, &(0x7f0000000200)=0xfffffffffffffffa, 0x8000fffffffc) 21:05:09 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002001c008d0300633be6160890eeffffff000000"]) ioctl$LOOP_CLR_FD(r0, 0x4c01) 21:05:09 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:09 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:09 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:09 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:05:09 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x3f) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) r4 = dup2(0xffffffffffffffff, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x1fd, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) ftruncate(r6, 0x80003) sendfile(r3, r6, &(0x7f0000000200)=0xfffffffffffffffa, 0x8000fffffffc) 21:05:09 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:09 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:09 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002001c008d0300633be6160890eeffffff000000"]) ioctl$LOOP_CLR_FD(r0, 0x4c01) 21:05:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:05:10 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x3f) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) r4 = dup2(0xffffffffffffffff, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x1fd, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) ftruncate(r6, 0x80003) sendfile(r3, r6, &(0x7f0000000200)=0xfffffffffffffffa, 0x8000fffffffc) 21:05:10 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:10 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:10 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:10 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:10 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x3f) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) r4 = dup2(0xffffffffffffffff, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x1fd, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) ftruncate(r6, 0x80003) sendfile(r3, r6, &(0x7f0000000200)=0xfffffffffffffffa, 0x8000fffffffc) 21:05:10 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:05:10 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000100)='/dev/vcs#\x00', 0xa) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffff, 0x400000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)=0x1) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x3f) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x80000001}) r4 = dup2(0xffffffffffffffff, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$inet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x1}, 0x28, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x1fd, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/168, &(0x7f0000000340)=0xa8) ftruncate(r6, 0x80003) sendfile(r3, r6, &(0x7f0000000200)=0xfffffffffffffffa, 0x8000fffffffc) 21:05:10 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:10 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:10 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:10 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)={0x1000, 0x61, "9e872be76293cb42be273c576d0088e915c012be1cb4cab8bfc17949cde048f7598865fd65db9515201af54dca45ee394543b232fa041e40b8b96c9e4ada12827043381688afdf087addd42b097a2f2681369f51f45e080745915eeac4c43f9159"}) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x15b, &(0x7f0000000180)={&(0x7f0000000580)={0x1, 0xfffffffffffffffd, 0x0, {}, {0x0, 0x2710}, {}, 0x300, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "8887ccb2644b44968e6dc1c6c911ad67e61588f48a6eaf8218b62cc06a2d30d882c4d96e7243f38a15d71ac895a26836ffce8853f5d1c3695450a1b615ddcac8"}}, 0x80}}, 0x0) 21:05:11 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7fffffff, 0x0, 0x0, 0x0, 0x103}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x4, 0x800}, {0x1, 0x1}]}, 0x14, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:05:11 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:11 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 178.832510] FAULT_INJECTION: forcing a failure. [ 178.832510] name failslab, interval 1, probability 0, space 0, times 1 [ 178.850849] CPU: 1 PID: 7611 Comm: syz-executor.0 Not tainted 4.14.134 #30 [ 178.857960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.867393] Call Trace: [ 178.869993] dump_stack+0x138/0x19c [ 178.873629] should_fail.cold+0x10f/0x159 [ 178.877799] should_failslab+0xdb/0x130 [ 178.881792] kmem_cache_alloc+0x2d7/0x780 [ 178.885996] ? file_has_perm+0x163/0x2c0 [ 178.890063] __split_vma+0xc9/0x6d0 [ 178.893708] do_munmap+0x257/0xd60 [ 178.897251] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 178.902096] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 178.906868] mmap_region+0x16f/0x1030 [ 178.911134] do_mmap+0x5b8/0xcd0 [ 178.914509] vm_mmap_pgoff+0x17a/0x1d0 [ 178.918405] ? vma_is_stack_for_current+0xa0/0xa0 [ 178.923246] ? __fget+0x237/0x370 [ 178.926710] SyS_mmap_pgoff+0x3ca/0x520 [ 178.930701] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 178.935664] ? do_syscall_64+0x53/0x640 [ 178.939645] ? align_vdso_addr+0x60/0x60 [ 178.943715] SyS_mmap+0x16/0x20 [ 178.946999] do_syscall_64+0x1e8/0x640 [ 178.950884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.955745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.960933] RIP: 0033:0x459829 [ 178.961001] RSP: 002b:00007fc10a897c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 178.961011] RAX: ffffffffffffffda RBX: 00007fc10a897c90 RCX: 0000000000459829 21:05:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) r3 = dup(r2) recvmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)=""/176, 0xb0}], 0x1}}], 0x2, 0x0, 0x0) 21:05:11 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:11 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000012, r0, 0x0) 21:05:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:11 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 178.961016] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 178.961020] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 178.961024] R10: 0000000004000012 R11: 0000000000000246 R12: 00007fc10a8986d4 [ 178.961028] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:11 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:11 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) [ 179.078508] FAULT_INJECTION: forcing a failure. [ 179.078508] name failslab, interval 1, probability 0, space 0, times 0 [ 179.126492] CPU: 0 PID: 7638 Comm: syz-executor.0 Not tainted 4.14.134 #30 [ 179.133608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.143001] Call Trace: [ 179.145610] dump_stack+0x138/0x19c [ 179.149265] should_fail.cold+0x10f/0x159 [ 179.153434] should_failslab+0xdb/0x130 [ 179.157421] kmem_cache_alloc+0x47/0x780 [ 179.161492] ? __split_vma+0xc9/0x6d0 [ 179.165300] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 179.170756] anon_vma_clone+0xde/0x470 [ 179.174652] __split_vma+0x28a/0x6d0 [ 179.178366] do_munmap+0x257/0xd60 [ 179.181908] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 179.186774] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 179.191528] mmap_region+0x16f/0x1030 [ 179.195327] do_mmap+0x5b8/0xcd0 [ 179.195346] vm_mmap_pgoff+0x17a/0x1d0 [ 179.195360] ? vma_is_stack_for_current+0xa0/0xa0 [ 179.207527] ? __fget+0x237/0x370 [ 179.210993] SyS_mmap_pgoff+0x3ca/0x520 [ 179.214979] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 179.219914] ? do_syscall_64+0x53/0x640 [ 179.223896] ? align_vdso_addr+0x60/0x60 [ 179.227968] SyS_mmap+0x16/0x20 [ 179.231259] do_syscall_64+0x1e8/0x640 [ 179.235144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.240165] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 179.245348] RIP: 0033:0x459829 [ 179.248529] RSP: 002b:00007fc10a897c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.256243] RAX: ffffffffffffffda RBX: 00007fc10a897c90 RCX: 0000000000459829 [ 179.263509] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 21:05:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 179.270774] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 179.278076] R10: 0000000004000012 R11: 0000000000000246 R12: 00007fc10a8986d4 [ 179.285430] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:05:14 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 181.865207] FAULT_INJECTION: forcing a failure. [ 181.865207] name failslab, interval 1, probability 0, space 0, times 0 21:05:14 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:14 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 181.944054] CPU: 0 PID: 7660 Comm: syz-executor.0 Not tainted 4.14.134 #30 [ 181.951209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.951215] Call Trace: [ 181.951234] dump_stack+0x138/0x19c [ 181.951251] should_fail.cold+0x10f/0x159 [ 181.951267] should_failslab+0xdb/0x130 [ 181.951280] kmem_cache_alloc+0x2d7/0x780 [ 181.951299] __split_vma+0xc9/0x6d0 [ 181.951311] do_munmap+0x2bd/0xd60 [ 181.986291] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 181.991145] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 181.995914] mmap_region+0x16f/0x1030 [ 181.999738] do_mmap+0x5b8/0xcd0 [ 182.003113] vm_mmap_pgoff+0x17a/0x1d0 [ 182.007030] ? vma_is_stack_for_current+0xa0/0xa0 [ 182.011885] ? __fget+0x237/0x370 [ 182.015361] SyS_mmap_pgoff+0x3ca/0x520 [ 182.019348] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 182.024285] ? do_syscall_64+0x53/0x640 [ 182.028265] ? align_vdso_addr+0x60/0x60 [ 182.032333] SyS_mmap+0x16/0x20 [ 182.035620] do_syscall_64+0x1e8/0x640 [ 182.039518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.044368] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.044379] RIP: 0033:0x459829 [ 182.044385] RSP: 002b:00007fc10a897c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 182.044396] RAX: ffffffffffffffda RBX: 00007fc10a897c90 RCX: 0000000000459829 [ 182.044401] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 182.044408] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 182.082292] R10: 0000000004000012 R11: 0000000000000246 R12: 00007fc10a8986d4 21:05:14 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 182.089575] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:14 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:15 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:15 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:15 executing program 4: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:15 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x6, 0x81, 0x2, 0x8, 0x3f}) [ 182.737121] FAULT_INJECTION: forcing a failure. [ 182.737121] name failslab, interval 1, probability 0, space 0, times 0 [ 182.816278] FAULT_INJECTION: forcing a failure. [ 182.816278] name failslab, interval 1, probability 0, space 0, times 0 [ 182.842197] CPU: 0 PID: 7721 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 182.849271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.858636] Call Trace: [ 182.861241] dump_stack+0x138/0x19c [ 182.864876] should_fail.cold+0x10f/0x159 [ 182.869038] should_failslab+0xdb/0x130 [ 182.873022] kmem_cache_alloc+0x2d7/0x780 [ 182.877179] ? file_has_perm+0x163/0x2c0 [ 182.881285] __split_vma+0xc9/0x6d0 [ 182.884920] do_munmap+0x257/0xd60 [ 182.888459] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 182.893926] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 182.898778] mmap_region+0x16f/0x1030 [ 182.898797] do_mmap+0x5b8/0xcd0 [ 182.898815] vm_mmap_pgoff+0x17a/0x1d0 [ 182.898828] ? vma_is_stack_for_current+0xa0/0xa0 [ 182.914822] ? __fget+0x237/0x370 [ 182.918288] SyS_mmap_pgoff+0x3ca/0x520 [ 182.922261] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 182.922274] ? do_syscall_64+0x53/0x640 [ 182.922286] ? align_vdso_addr+0x60/0x60 [ 182.935312] SyS_mmap+0x16/0x20 [ 182.938595] do_syscall_64+0x1e8/0x640 [ 182.942482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.947336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.952612] RIP: 0033:0x459829 [ 182.955796] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 21:05:15 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000240)={0x80bc}, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/253, &(0x7f0000000200)=0xfd) [ 182.963547] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 182.970817] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 182.978111] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 182.978118] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 182.978123] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 [ 182.990888] CPU: 1 PID: 7714 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 183.007027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.016373] Call Trace: [ 183.016396] dump_stack+0x138/0x19c [ 183.016415] should_fail.cold+0x10f/0x159 [ 183.016430] should_failslab+0xdb/0x130 [ 183.016441] kmem_cache_alloc+0x2d7/0x780 [ 183.016455] ? file_has_perm+0x163/0x2c0 [ 183.016468] __split_vma+0xc9/0x6d0 [ 183.016481] do_munmap+0x257/0xd60 [ 183.016490] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 183.016499] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 183.016512] mmap_region+0x16f/0x1030 [ 183.016528] do_mmap+0x5b8/0xcd0 [ 183.016542] vm_mmap_pgoff+0x17a/0x1d0 21:05:15 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x4001) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:ofject_r:bin_t:s0 system_u\x00'], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) dup(r2) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'hsr0\x00'}}, 0x1e) [ 183.016556] ? vma_is_stack_for_current+0xa0/0xa0 [ 183.016566] ? __fget+0x237/0x370 [ 183.016582] SyS_mmap_pgoff+0x3ca/0x520 [ 183.016594] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 183.016607] ? do_syscall_64+0x53/0x640 [ 183.016616] ? align_vdso_addr+0x60/0x60 [ 183.016625] SyS_mmap+0x16/0x20 [ 183.016633] do_syscall_64+0x1e8/0x640 [ 183.016641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.016656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.016664] RIP: 0033:0x459829 21:05:15 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) 21:05:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x4210003102441ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="7c0cb5a78f85e579582246faa5c952d8d6c110d722", 0x15}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000021000000000000000000000000000000000000000020ffffeeffffffffffffff00000000000000000010000000000000000000000000000000000000a4640c33648fcf915f28637ef4c41921b352cb9b5796f3c7c5a7daf024491edb8e811c7dc955d7b4c7942719afd35b8661e9aa01a43f208e5065f07b579965101db5237d47", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0e0000003fb40f50328d5f2de21800f00000"], 0x50}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffffffbffffffe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x1, 0x2}, 0x2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp-reno\x00', 0xb) wait4(0x0, 0x0, 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000340)=0x3a8) [ 183.016669] RSP: 002b:00007f8031f54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.016680] RAX: ffffffffffffffda RBX: 00007f8031f54c90 RCX: 0000000000459829 [ 183.016687] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 183.035130] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 183.035137] R10: 0000000004000012 R11: 0000000000000246 R12: 00007f8031f556d4 [ 183.035143] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 [ 183.155792] FAULT_INJECTION: forcing a failure. 21:05:15 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x62}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 21:05:15 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 183.155792] name failslab, interval 1, probability 0, space 0, times 0 [ 183.169029] futex_wake_op: syz-executor.3 tries to shift op by 4095; fix this program [ 183.181388] ptrace attach of "/root/syz-executor.3"[7738] was attempted by "/root/syz-executor.3"[7739] 21:05:15 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x1) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet(0x2, 0x6, 0x6) 21:05:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) [ 183.237772] FAULT_INJECTION: forcing a failure. [ 183.237772] name failslab, interval 1, probability 0, space 0, times 0 21:05:15 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) [ 183.299562] CPU: 0 PID: 7744 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 183.306777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.316137] Call Trace: [ 183.318745] dump_stack+0x138/0x19c [ 183.322397] should_fail.cold+0x10f/0x159 [ 183.326556] should_failslab+0xdb/0x130 [ 183.330546] kmem_cache_alloc+0x47/0x780 [ 183.334616] ? __split_vma+0xc9/0x6d0 [ 183.338426] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 183.343891] anon_vma_clone+0xde/0x470 21:05:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 183.347895] __split_vma+0x28a/0x6d0 [ 183.351617] do_munmap+0x257/0xd60 [ 183.355161] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 183.360013] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 183.364783] mmap_region+0x16f/0x1030 [ 183.368595] do_mmap+0x5b8/0xcd0 [ 183.371970] vm_mmap_pgoff+0x17a/0x1d0 [ 183.375877] ? vma_is_stack_for_current+0xa0/0xa0 [ 183.380715] ? __fget+0x237/0x370 [ 183.384170] SyS_mmap_pgoff+0x3ca/0x520 [ 183.388143] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 183.393077] ? do_syscall_64+0x53/0x640 21:05:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 183.397059] ? align_vdso_addr+0x60/0x60 [ 183.401133] SyS_mmap+0x16/0x20 [ 183.404421] do_syscall_64+0x1e8/0x640 [ 183.408304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.413158] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.418431] RIP: 0033:0x459829 [ 183.421609] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.429319] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 183.436591] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 183.443864] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 183.451128] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 183.458390] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 [ 183.480086] CPU: 1 PID: 7735 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 183.487229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.496673] Call Trace: [ 183.499275] dump_stack+0x138/0x19c [ 183.502923] should_fail.cold+0x10f/0x159 [ 183.507172] should_failslab+0xdb/0x130 [ 183.511157] kmem_cache_alloc+0x47/0x780 [ 183.515224] ? __split_vma+0xc9/0x6d0 [ 183.519041] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 183.524507] anon_vma_clone+0xde/0x470 [ 183.528397] __split_vma+0x28a/0x6d0 [ 183.532119] do_munmap+0x257/0xd60 [ 183.535663] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 183.540709] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 183.545471] mmap_region+0x16f/0x1030 [ 183.549295] do_mmap+0x5b8/0xcd0 [ 183.552674] vm_mmap_pgoff+0x17a/0x1d0 [ 183.556566] ? vma_is_stack_for_current+0xa0/0xa0 [ 183.561409] ? __fget+0x237/0x370 [ 183.564874] SyS_mmap_pgoff+0x3ca/0x520 [ 183.568889] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 183.573820] ? do_syscall_64+0x53/0x640 [ 183.577797] ? align_vdso_addr+0x60/0x60 [ 183.581863] SyS_mmap+0x16/0x20 [ 183.585145] do_syscall_64+0x1e8/0x640 [ 183.589028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.593876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 21:05:15 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e20, @multicast2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 183.599060] RIP: 0033:0x459829 [ 183.602240] RSP: 002b:00007f8031f54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.609944] RAX: ffffffffffffffda RBX: 00007f8031f54c90 RCX: 0000000000459829 [ 183.617213] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 183.624482] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 183.631747] R10: 0000000004000012 R11: 0000000000000246 R12: 00007f8031f556d4 [ 183.639017] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:16 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) 21:05:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 183.758018] FAULT_INJECTION: forcing a failure. [ 183.758018] name failslab, interval 1, probability 0, space 0, times 0 21:05:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x200, 0x0) [ 183.804479] FAULT_INJECTION: forcing a failure. [ 183.804479] name failslab, interval 1, probability 0, space 0, times 0 [ 183.829365] CPU: 0 PID: 7782 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 183.836438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.845803] Call Trace: [ 183.848414] dump_stack+0x138/0x19c [ 183.852063] should_fail.cold+0x10f/0x159 [ 183.856227] should_failslab+0xdb/0x130 [ 183.860210] kmem_cache_alloc+0x2d7/0x780 [ 183.864367] __split_vma+0xc9/0x6d0 [ 183.868001] do_munmap+0x2bd/0xd60 [ 183.871542] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 183.876390] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 183.881155] mmap_region+0x16f/0x1030 [ 183.884965] do_mmap+0x5b8/0xcd0 [ 183.888332] vm_mmap_pgoff+0x17a/0x1d0 [ 183.892226] ? vma_is_stack_for_current+0xa0/0xa0 [ 183.897067] ? __fget+0x237/0x370 [ 183.900523] SyS_mmap_pgoff+0x3ca/0x520 [ 183.904501] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 183.910506] ? do_syscall_64+0x53/0x640 [ 183.914481] ? align_vdso_addr+0x60/0x60 [ 183.918542] SyS_mmap+0x16/0x20 [ 183.921823] do_syscall_64+0x1e8/0x640 [ 183.925713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.930737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.935921] RIP: 0033:0x459829 [ 183.939102] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.946812] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 21:05:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x7fffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2e, &(0x7f0000000240)=""/150, &(0x7f0000000180)=0xfffffcef) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) 21:05:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 183.954077] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 183.961347] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 183.968726] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 183.976004] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 [ 184.027434] CPU: 0 PID: 7788 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 184.034514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.043909] Call Trace: [ 184.046516] dump_stack+0x138/0x19c [ 184.050164] should_fail.cold+0x10f/0x159 [ 184.054419] should_failslab+0xdb/0x130 [ 184.058409] kmem_cache_alloc+0x2d7/0x780 [ 184.062577] __split_vma+0xc9/0x6d0 [ 184.066216] do_munmap+0x2bd/0xd60 [ 184.069763] ? arch_get_unmapped_area+0x5f0/0x5f0 21:05:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl(r0, 0x46, &(0x7f0000000180)="0e9675a933886794373390703ae2946199560db45fb2e89a0b421faba8f0ade825c806e714e9a9740cc3f649f4bdb48e8f7232b6d742b9094ca4025db362a5c78e66b869a4e15dee4d75cd012043c8b539e1b7c487f5cde6c9afdae1ba1020c3fb572afb6929226562d2340f680ff1eb8d463a15a9e4f2aef3d22e333ba34665d6e83c124fc208518d169385bc7d496ed8a7c8c0fc5a73ebf3ae0345d6ea71a6eae4a03ad2fd250a7af001fa9a400937c77faa67e92973d0ea56dd42937127d73126d927d56a0c3ccb5c54d2dc8ee20451cbe011734a10d1080576baf27dc7d91827f62a60b4b0e6c160de7577b14293c0e0dcb646d5ac202983be4bcd61cc") ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000d80)) sendto$rxrpc(r0, &(0x7f00000003c0)="f186bbbe5099a71222b52890435b550799a4d26c1f17da94de26c03e428cb8aae4ebd65c78307278c2aa2dae57e50237acdd963f8c1c39ca72249afc991a868a1c34fc469706e799505305da90c00fcd794195c250f294c6f58e7787c1a84e3f9038ab2c86550f4d684108023e49e31d6411869c5b045f7f37f491b3547730b213c5319c6c2a69acb9da3a1858127d2bc378ac52af673bd4182abee2b06b073c3568c83fda6f31810a723fac91e84c3f994a78ae77d0e7e95d93ba9c8b32e5909818d9259a2c4634331a32523141035461b44574fb5230ad667a7a6957600a4462085c24e213882c93f28403e64c2ac5611684", 0xf3, 0x81, &(0x7f00000004c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @mcast1, 0x8}}, 0x24) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000380)=0x7) bind$tipc(r0, &(0x7f0000000640)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) clone(0x8000, &(0x7f0000000300)="39c2f494c0051405d56b0ea61bac4b11c2e58b7673718f71f7d9e3cd650cb75c3dcf2bb829ee2a250d3508db3a32320ce2e56c5f0c5e758b0e8c108f96c94f56a22d66cf231ff8f6dc52ecc3c2d4e766580f082f49a1295a92038e6e46696a7dfb7f5da6b7", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="e753b758c136f62451c2244b9e374881d466ababf2f2de72baed0d79f1499ff650b416e53ea7d93cd53dbc24072cc1787d0352116d24e5f497c3556416e2fca07a2b478d94d36997dff6a1507dfc1c6dd5839a3b77d9ae2e15c3ab44d1cd7b913aa87bd1fb1693e7861e99a8e6b707a6903a352b6783898010") mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/136, 0x88}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/55, 0x37}, {&(0x7f0000000ac0)=""/57, 0x39}, {&(0x7f0000000b00)=""/245, 0xf5}], 0x8, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @loopback}, 0xa2, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='bond0\x00', 0xcec8, 0x6}) 21:05:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8080, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfna\xcf\x18R\xf3\xf3\xf7\xe4vB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x899.\x85\xa5\xd8\xb85V\xf6\x15h\r\x89\xc2\xdf\xd6\x88\xd1\x1e@\xf5\x1bh\xab\xbf\xd8*\x94\xf3]i\x0fD\n\x05\xaf`5\x7f\"4[\x064\xb93Yy\xdbd\xf1\xf3/\x92\xc0\xc5\xa4\xeb\x95\x0eZ\xbf/\\m0\x93\xd3\x15$\x1bMe\xba\xc9\xe8\x01\xb3)', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x30000000, @dev={0xfe, 0x80, [], 0x25}, 0x7fffffff}, 0x1c) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@loopback}, &(0x7f00000003c0)=0x14) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000380)={0x0, {0x80000000, 0x40}}) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/198, 0xc6) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) getegid() [ 184.074614] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 184.079370] mmap_region+0x16f/0x1030 [ 184.083185] do_mmap+0x5b8/0xcd0 [ 184.086566] vm_mmap_pgoff+0x17a/0x1d0 [ 184.090464] ? vma_is_stack_for_current+0xa0/0xa0 [ 184.095305] ? __fget+0x237/0x370 [ 184.098767] SyS_mmap_pgoff+0x3ca/0x520 [ 184.102745] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 184.107677] ? do_syscall_64+0x53/0x640 [ 184.111659] ? align_vdso_addr+0x60/0x60 [ 184.115729] SyS_mmap+0x16/0x20 [ 184.119018] do_syscall_64+0x1e8/0x640 [ 184.122915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.127767] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.132962] RIP: 0033:0x459829 [ 184.136150] RSP: 002b:00007f8031f54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.143864] RAX: ffffffffffffffda RBX: 00007f8031f54c90 RCX: 0000000000459829 [ 184.151147] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 184.158422] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 184.165697] R10: 0000000004000012 R11: 0000000000000246 R12: 00007f8031f556d4 [ 184.172976] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:16 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) 21:05:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x1d, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 184.280241] FAULT_INJECTION: forcing a failure. [ 184.280241] name failslab, interval 1, probability 0, space 0, times 0 [ 184.322842] CPU: 1 PID: 7819 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 184.329922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.339298] Call Trace: [ 184.339659] FAULT_INJECTION: forcing a failure. [ 184.339659] name failslab, interval 1, probability 0, space 0, times 0 [ 184.341893] dump_stack+0x138/0x19c [ 184.341912] should_fail.cold+0x10f/0x159 [ 184.341932] should_failslab+0xdb/0x130 [ 184.341947] kmem_cache_alloc+0x47/0x780 [ 184.341956] ? __split_vma+0xc9/0x6d0 [ 184.341967] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 184.341980] anon_vma_clone+0xde/0x470 [ 184.341995] __split_vma+0x28a/0x6d0 [ 184.342012] do_munmap+0x2bd/0xd60 [ 184.389311] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 184.394161] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 184.398926] mmap_region+0x16f/0x1030 [ 184.402733] do_mmap+0x5b8/0xcd0 [ 184.406102] vm_mmap_pgoff+0x17a/0x1d0 [ 184.409991] ? vma_is_stack_for_current+0xa0/0xa0 [ 184.414826] ? __fget+0x237/0x370 [ 184.418292] SyS_mmap_pgoff+0x3ca/0x520 [ 184.422275] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 184.427219] ? do_syscall_64+0x53/0x640 [ 184.431194] ? align_vdso_addr+0x60/0x60 [ 184.435254] SyS_mmap+0x16/0x20 [ 184.438539] do_syscall_64+0x1e8/0x640 [ 184.442429] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.447293] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.452484] RIP: 0033:0x459829 [ 184.455668] RSP: 002b:00007f8031f54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.463375] RAX: ffffffffffffffda RBX: 00007f8031f54c90 RCX: 0000000000459829 [ 184.470641] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 184.477903] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 184.485174] R10: 0000000004000012 R11: 0000000000000246 R12: 00007f8031f556d4 [ 184.492442] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 [ 184.499730] CPU: 0 PID: 7829 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 184.506770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.516117] Call Trace: [ 184.516136] dump_stack+0x138/0x19c [ 184.516152] should_fail.cold+0x10f/0x159 [ 184.516169] should_failslab+0xdb/0x130 [ 184.516179] kmem_cache_alloc+0x47/0x780 [ 184.516191] ? __split_vma+0xc9/0x6d0 [ 184.526556] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 184.526573] anon_vma_clone+0xde/0x470 [ 184.526588] __split_vma+0x28a/0x6d0 [ 184.538391] do_munmap+0x2bd/0xd60 [ 184.538402] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 184.538416] ? inode_has_perm.isra.0+0x15c/0x1e0 [ 184.547734] mmap_region+0x16f/0x1030 [ 184.547757] do_mmap+0x5b8/0xcd0 [ 184.547774] vm_mmap_pgoff+0x17a/0x1d0 [ 184.575654] ? vma_is_stack_for_current+0xa0/0xa0 [ 184.580506] ? __fget+0x237/0x370 [ 184.583975] SyS_mmap_pgoff+0x3ca/0x520 [ 184.587958] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 184.592884] ? do_syscall_64+0x53/0x640 [ 184.592894] ? align_vdso_addr+0x60/0x60 [ 184.592903] SyS_mmap+0x16/0x20 [ 184.592911] do_syscall_64+0x1e8/0x640 [ 184.592921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.604212] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.604222] RIP: 0033:0x459829 21:05:16 executing program 5 (fault-call:1 fault-nth:4): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:16 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) [ 184.621387] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.629191] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 184.636481] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 184.641977] FAULT_INJECTION: forcing a failure. [ 184.641977] name failslab, interval 1, probability 0, space 0, times 0 [ 184.643763] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 184.643770] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 21:05:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x3, 0x19, 0x9, "774137e4b3d169d26eb22627e31ba03be97f96bbfae2623a907a40fb32067bde9b4e213b3166886893c3ca606922867eaff69958fab9160f1bc4c33e2e6495e2", "82e7c36d7ac1461546db40f7c83ca3cf3436cd698e4d65317f819d6da24d0708332d73545ca40eb99d98387fb34d15a4bc9fba644948121b35e2dd8052c55e53", "4982fe325456d73136cd35c07b284ed6dd074e0bdfb495a4e018e1baf7c54fe6", [0x6, 0x7a]}) 21:05:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x2, 0x1a, 0x7, 0x6, "bd3bc73fde3fb92fa42ada34c29429b0d1db12cda2b0814a1cce13a79ae64844"}) [ 184.643776] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18) [ 184.789624] CPU: 1 PID: 7838 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 184.796698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.806060] Call Trace: [ 184.808666] dump_stack+0x138/0x19c [ 184.813511] should_fail.cold+0x10f/0x159 [ 184.818108] should_failslab+0xdb/0x130 [ 184.826885] kmem_cache_alloc+0x2d7/0x780 [ 184.831147] mmap_region+0x602/0x1030 [ 184.834979] do_mmap+0x5b8/0xcd0 [ 184.838358] vm_mmap_pgoff+0x17a/0x1d0 [ 184.842247] ? vma_is_stack_for_current+0xa0/0xa0 [ 184.847124] ? __fget+0x237/0x370 [ 184.850579] SyS_mmap_pgoff+0x3ca/0x520 [ 184.854572] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 184.859495] ? do_syscall_64+0x53/0x640 [ 184.863469] ? align_vdso_addr+0x60/0x60 [ 184.867517] SyS_mmap+0x16/0x20 [ 184.870796] do_syscall_64+0x1e8/0x640 [ 184.874671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.879536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.884713] RIP: 0033:0x459829 [ 184.887911] RSP: 002b:00007f8031f54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.895629] RAX: ffffffffffffffda RBX: 00007f8031f54c90 RCX: 0000000000459829 [ 184.902887] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 184.910168] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 184.917431] R10: 0000000004000012 R11: 0000000000000246 R12: 00007f8031f556d4 [ 184.925656] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:17 executing program 4 (fault-call:1 fault-nth:4): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:17 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='ppp0{&wlan1.%\x00', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x111}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:17 executing program 5 (fault-call:1 fault-nth:5): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) [ 185.007102] FAULT_INJECTION: forcing a failure. [ 185.007102] name failslab, interval 1, probability 0, space 0, times 0 [ 185.018529] audit: type=1400 audit(1564520717.337:47): avc: denied { module_load } for pid=7858 comm="syz-executor.0" path="/selinux/status" dev="selinuxfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=system permissive=1 [ 185.066376] CPU: 1 PID: 7863 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 185.073450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.073455] Call Trace: [ 185.073474] dump_stack+0x138/0x19c [ 185.073491] should_fail.cold+0x10f/0x159 [ 185.073510] should_failslab+0xdb/0x130 [ 185.073525] kmem_cache_alloc+0x2d7/0x780 [ 185.073541] mmap_region+0x602/0x1030 [ 185.105150] do_mmap+0x5b8/0xcd0 [ 185.108526] vm_mmap_pgoff+0x17a/0x1d0 [ 185.112432] ? vma_is_stack_for_current+0xa0/0xa0 [ 185.117274] ? __fget+0x237/0x370 [ 185.120737] SyS_mmap_pgoff+0x3ca/0x520 [ 185.124721] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 185.129654] ? do_syscall_64+0x53/0x640 [ 185.133632] ? align_vdso_addr+0x60/0x60 [ 185.137702] SyS_mmap+0x16/0x20 [ 185.140995] do_syscall_64+0x1e8/0x640 [ 185.144888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.149747] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.149756] RIP: 0033:0x459829 [ 185.149763] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 21:05:17 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r2 = geteuid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x35c, 0x11, 0xf, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x6}, [@typed={0x4, 0x8d}, @nested={0x31c, 0x21, [@typed={0x4, 0x78}, @typed={0x8, 0x32, @uid=r1}, @generic="d7eb21143721d224e335f0805d946e9e9860bb7117e4d1041865edb25dcc97600e336f05f9eeae465acdea4f36d2e1a9f56be03c69de4f9adb8a13d3b231ba43b384e45550657e6ca838ed8860c121561bab725ab5c5d86f23179834d6534726b782ecedde18c4d853883617a7945d26e4424cbc57a70d6e98bd48211ca7c196bdd86be37b0b855299524ede6452369556ae02ff04d00103caed0a2cc1ba4b5180d8e07476dd77e3b6103c7bbdaeb62cfeb4fa8ce9ae7314c11cadab75957c7dccfde1a02de015355c140ffb6d3ad86d5ac955e760c26c83023800ab15b78a47d0fbcbc37f39e6413d29466b9eaddebb1a454ebe", @generic="2498a57a40f795c960e7153590a7dd6846f22f766d48fde1dd165d6ad10ad179ccdefa450b4421d39d032e43b2714c66b9c886e0aff8721273a005fbaca8c923e513c45b38b567526347620d2e4471127c0e30e6b8e26bce537c3338326bf4221d270d81369b7cf704349cfe38", @generic="a4306c9996672ba91e58ee5022ae5a4112ae318f84228649f2cbc55a2e774e6c5c55156c087dead038ee02993a98995d1b13bce3ece0c37806b5c5a005038b8dc08bf79514d2bf183b3ae048b2cfe4b3049a70111abd260599efc14ad36fc38da6e826a2757887743fc5ed4e79037a45e45e2a64dc5732d7ac5293ee4265b19e6ea890291f7efadb44685728b7a243fa4a058d609ae08213426b58288696b594a55af5054d6702c30fe69cce6104ca2fd8ce62a58e030ac602167b84e522f06359569ce1de81fca5d7a74f6c45b300b8262cc6726765d072b786751aa55fd27f6625c342b006e447ebba3bbcc95a59fdb98ae8b41a395660", @generic="476f533e190652178ddecb0a1a9064ef0d161c8a0d110a1e1ff662fe8bb751c8f349105ca09ce09881c65704303e5dab01c40dc6e947e769e91e39382e84bdd358eaa016060653014543ae021a94b2281f56cadbfbb0d7242c6c671ae6d0be26cd27cb93bd078cd087b8ae1a4deadb3b7ea27a7c3126633048be1d3a1d321730d0ca8489cddf37ac09c82f8ec72e5b5592f21367b4695cb2bdebd9ca4c5c", @typed={0x8, 0x3, @ipv4=@loopback}, @typed={0x8, 0x4c, @uid=r2}, @typed={0x4, 0x3e}]}, @typed={0x8, 0x4c, @pid=r3}, @nested={0x14, 0x47, [@typed={0x8, 0xf, @u32=0xc298}, @typed={0x8, 0x8e, @fd=r0}]}, @typed={0x8, 0x82, @ipv4=@local}, @generic='U']}, 0x35c}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) 21:05:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:17 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x24) r1 = socket$isdn(0x22, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x10000000}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) [ 185.165840] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 185.165846] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 185.165852] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 185.165859] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 185.165864] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:17 executing program 1: write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:17 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x3}, 0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:17 executing program 4 (fault-call:1 fault-nth:5): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:17 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1d, r0, 0x800) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x40a5, 0xc0a80) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 21:05:17 executing program 1: write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:17 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x48000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7fffffff, 0x3}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @empty}}, [0x1, 0x2, 0xfffffffffffffff8, 0x6, 0x100, 0x0, 0x3, 0x4, 0x1, 0x20, 0x6, 0x3, 0x3, 0x100, 0x69]}, &(0x7f0000000280)=0x100) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) 21:05:17 executing program 1: write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) [ 185.473127] FAULT_INJECTION: forcing a failure. [ 185.473127] name failslab, interval 1, probability 0, space 0, times 0 21:05:17 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xa800, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x9f4, 0x7ff, 0x7, 0xe, 0x4, 0x6, 0x7fff, 0x9, 0x5, 0x41, 0x7}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:17 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000012c0)={0x0, 0x0, 0x1000, 0x40, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000000)=""/2, 0x2}]}, &(0x7f0000000200)="7d5b423f7687fe5db650bab5459f87cab4baadc99646fd1cf6bb75c6f17150accdfa2ab52f78e44683b10d12932886f6e5255cca647a73510e11ed6b3b09df2bcbd051d12ed69b6e518f905808de1d49f3888e9242a4256193e276a4cea5754f6d2bec557f1baa709b0a5233e8db2df8a2d7f3d46e929a6777a2ecd71a759522b35d3534a033d9cedf2ce85a21eaaeca4afe655802f7c88645a1b403ebdb366a3e3ec77d636cd58b4a3c671e9223c88a07b15859d821a88604b9e2abae6f366bc5b1fa77bdda2fc0f025ee72fed8712fdf8d9b0b7f6ae8f8e1e15e48eca63b46a5135126727951fe658d5e2ea991c2c5ac0a8dc62f404fab91a9240ae092380cda52e3b4d106e814e3c5229a531f883a754e26c6c84366350ac019e9430dcee22047acc1304baf5acfb3a74f913dce6df59999bed057293f888ccf55a942397d5cca3791d32fd13458af8cd04eba99ecf407cc93eb2e62884daea2583480ffe9b4566d3621b70ab7b7dbd90cb0121a48c280176beec110fbe4cd1b6777736829cdd686d9a164aaa6077adc31a65fa4961380c2dcf84022c3cf352aff755461b274b950a6240defc91e6873b4a193f9f412e0be2901a7416d761855d193044f85d87c4d6a8d1ad508c2d5f0105516e7d7d69ff7309600d1a78e12f1787a8a832925e5527acdb297fccd19c31eeef3f46cf705ecb0eaf2a56f6f2020f53fe2d080d3f5860fd2d6ac88c8e6536302eeace7434448d49bab8e24e41c8bcc88c62bbdece0b789a96d240250a3aaa591d78ac1de7bde2a62578b104c9543524197c40bd4f0351d06ef184babe45214a4dae00cbe961f0c5384e14e98d6c98e2771ff17483647421bea8c18d90763e7f8bb4ab4a4621f037c1ed300722da1ca7d00bfe742ec3647e3d30894acf1dfaf8ffe694e4e29a0eb5414b5b8b8f5e6183b868b6f666451f1b293af74525f8e32de929d543a024b934b4a6f83ac940d425917e3661fff353d44ac18dd77c94c3dadc0fdf15ccb51bcfd28814cabafad0b85ea399b350cd3976370cfb1d3776c12622855cd278a3d55729638dd9d811daff9245e33abbe834f1cbf7defacd73eb319086dd7322c4f5e317a5db141ab9202d3395971983ebc05afcb6c7e49d28f8aa4faf50b4b88eb36f3926505e4aeec974bcd1e2fd430a250a3b456f09daac4ede3035c711562b7645e569baaf5cfef33a7dce7bb5ea24af0133b98c513bb701caeb0ac74666efd1086811f96d8f3f1a7f5c69e6bfc5023504e2c78a3b41a7c32084b6eb481dcab069e0d1290207c4789f2c97bc61886bb741a26490e6844c535d3d5737f7732f83c1f151cfc23f4b8c2b2de7c52aba7396c4b5501265e85a1be54735fa6e7376a24ff55a7fcab9330c4b016eacbc7e3a5f321a8ce88c788e0546a29814c1bf7e8cbd886339fe7fd77e267c4dac98778316263616057461035be43f21971136ae885f75e2df30801a8d1b8688d45547f97dc780783208632bbe718bb103010906e52068072fa903a4a091528231bf09d02b9e88b8e321fa7ccda8a403a1535c0e18c424824c510bea003cfb38430669b71893b0bde63914933f22153c42a00a777e69ca1607ce29f87f9e3da6e98541df8a67daa846f3a8399827e80877ce7da7b86a7da3dc438f86cbecacd5742a5b6fab1f5b759be757391eb64d3d53a5c38920ef8fc74e2e531d3eca6d2edbbb5be751327ab2ef60486dcb07efd9220b4caabb58b1f567454ff501ebe145ba2921d7e4ef807ea54ed8b43c0c21a6439f568cff908d760877eada01bdaf599e7b06ce99b5f87fa85ff75305575051915ccd30c7cadd2e50dec54528ed62659397049a82d310f3ca5bc543e5692b55aea10a63c9405fa532fcf343d41d25256463ce428d2c3d6324672fd4dad326af64ba62ef3755021692bb43c56c6ffe974e5d4b910fd4cc038d09c4f72b90c3c8bb65db6faa30498bc1f0e244b072b7bc55d68bcad26b1081fa94e71292cf3d9e5b9204054ec38e2b0681e261ae4509db05cad892a1e3bfdcbdb6ffde550c2273e6ca45c1b590790624e8d65a739c84b8e34dda729a54a90c2889e564e819d52465329b3cefb95474207e9f52ed2771c688f70d71afae204c20a8fd032596a2dc8dd7f3d241d5c0a970bd13515358a3de07cbfb0dce91f51e6c9cc43e373f14d75101aa9a908b07c841d7ab738e233f157c4bc054057d2aef943938d12a70235cc4170db6ea783d90ce739ed19ef6c7c8122ceb5995d3cd4821bb8af88a76b539e713d25b00158f6751944e9e0b5720d347ec4d79056d7b179af3ce9fb99b9185a8750bc3e075c79b440d145202a229982df36f49373aa88b84351ca0c64c23cabd5edd70fb3a72402b0e4997b3e5516f4d65722fa3d77c614cf10eb01a5258ab2e51d8e166d675fc3dc9a0f01b5044657a40816e65664e6f4f497c157c98d8c768edb548ec546aa0ca428254f315c0beb9b7121594ba519b77c8a8278ad52ff995069ec5ec2d41fc9fb02fc8ffd26c16f6e937aef19d5b5c80d7f6220790960783db551bfd4e69434cbfa9f308946de092ace8fbcd0b4df7288a45768b7e0c6110b8e68bbcb7628234d43e3acd0bc5ed85f5eef2a66ae6d2dfa737caedb09d0b6768a9dafa1349d5b01c958cb629d043b4fde27c11088537c748f743e55ba8b220051d0543e28bcbf65038f78d1c01351cbd1f8e97017981e7195109cb3e07c8493867288986dfeb887778f0bdeb61982e8ba16aad289da6a75ad3247ada94b619a044a984b5fe1f2c80c66b1008e9970869f2d8c632d9f2f602b0cc90df18ffdb55b03b9ebef21050318e3c8824452eadf4a897b40cd66545b165152420b42c50bdcc60e922e5582d5a3a567c84a025b47da940a99c0a0fb38f8e84c5124642e14caafd3f6aa37035672269be9c5979455e5def70965a81dd2214821cedc8c3132dd9d8b5117f7e65c7ed22ae0d4495582e3a9629dd03833b21d753d16fe853b579c820c86714678ff2f88b23819ea4d75276786cff31a662744acccbcb0121455f88830728c0d70f72cc8577146124fdf05912826ed21ff52f215377b078c54c1a6409f6c492380585fafff0830629e52491fcfc56cf0197037ff367632548ac00d6a1702c8fff4ae5e8de7b9bbddca257295a16ffdd8902eb208006a19e921c043de35e8dde2e001a64b37eba6746f33a9ee776473a76557cd24478bbff027d8b6593c2364d01638f59190a859ff181c2ed7038559422592c0a44a8d52fde879d5f00172f8837c9548f99d50987c09372bb10638dc9e2b9b18c9f028753b2670aa74a33db3724c45f8707a7ed9c728a35437e9306ace7370dff77f7cdf6d99bf6e426c37bd993336afad7363d86df3cfd18b9ce13b3a53f7615002bb99912802c7e63c6c6427e560c77536129bb93de3e4b459e451ff95154e94803838581ede47c05d9f4f106f42369ee6f3d9dfecb2b1d1a74dd9771df4d40e8a09d9e6d829eff8c10462c7f1e2c80362d47a6da469e7cf7aa055457384239ce3a244ddde1bf6c7d3c92bbc3e94bd2bd9c07e6ab4f3b82d4e4d81fc53761242ff17672b07f5a63286e4622b2fdce6d902fea441d8e2ee602cc6fdcf45c46a3c3f39f4bb9a1d67c62262674b0b32f972a5d927c38487a762532f1128e4a7a111078fe09531643ae59cf55ae2a1437ee14c347a601b71f926b470a408ce63974ab385c09ed3056962ca1786eda4171547c0ca7f3bb5735379db2cd7b8d12c1efbfe97c80682bd7ea58246193f91c61efd39c7532de70de1beefa11581fa07a9e943129fccec1b806f0671db375c14e8797554818ddb0287aa5e2dd782c38cb873b5e47815378835bd57189352764d7c8747a3f3265c009076c8b41fc9ef368e95bf13e68fc29cf1174107adc63c9f4c7a0e2ab494bde4ac1eeec0eb2a0e31aaf5a6e14dd22c5b33579997700254b225114b2f79067d501476f7f2d57b9b66dc1d4f34532f01e64c0663f4c5f17da35252f6fa17bee10db30835203bf87abe3afaddbfc24883c766dc4b3011f22a8af3d8fcad034fc9da52b1490f9dbf3a6e67c66c0b25a238d1cb364a1940ba41c3f527f30d85d8bb01dc6de8235aac7f65bc60d413c768b48b6455ebd4b0534d1926bb4c9613d13dad6e85de5fe544daa98f0e25af037a9e928184fca31462c7f27723671cdac770415369a071404fa83b0c68f554c21b4c4944f3e21cc60bb8723a2bd68d526be40914d29f9353e74ad89d7e43e0351b2923e6cce22cdc0429b7acc4a75acc2472a7514afc920643db8b34ccb24682d37204a409bd3dd15a6d44cf91e880c03984de2cdaa5730f8ef628c0b01a2415522f6c48d57b5abac75e64693ff2caa1f798e8b6c6a6b9393976a03f35f43bd8f5d9d7d587d260dc798c38e914ba5b2a773b3bf4b429cd2c65693ccdf2f063d90a45700cd896ab3bcc9c21476ac4104dfe852632f7fd47e8857fac003461e7c820f622c7ffcf4f6f66de79d7613afbd64bf05bedb884fdfd94fbef2a2d4a2d2c443678920a7a38428688598adc43a00f1eeb98b936f5a0ace2c55e3d2ba927bbadcddaa31d81275ee466bd82cc32758f778f9fc31f20bad49837d66e38c39f94d52963ae9718b8d3e4ad68d5d646960d1d290ae1d66ef7add60cd3a1efd74627b93ff31658bbd8ca6258c404a92134d45dd5faaf033795bf95e725b885766095f7c2ba9b84f338c685db73b007540e4b7253c0e3108a9a23aafdecf92952d95964948a00f7ce548076d9c21b4e5fa9cf95d986f6c347be8bebaa372d90f5082d57d26f938e4c9acf80188e4d18226a6a565a59e604cb6b27d633793f979f17404ee5d12c96ecc2396529d1fef62f79a5a92da92bfd1f0b48ea241873b420fc445912563738e896ef271feec827db4e7cf51f8829dc1a17f77df5f020f6e8684347f0b6ce034f355beda5ba8630382e0076afa9478c41dbd3de49221e57dff9dd4302f3f5aef4d00e22b25d92bbcfd670d28398e88df7fdfcae8e3d76fb864a11acb0ab8fde7a825a75c883f6080cb20e98fa925cb7c9fb27729e642cfafee34f20a71aee921ffda1770821518f13c9cc7901d78c3a184620105e78f2f3e8892974953a8dc63d669e4d62a9b1a0841ffdcc0be6d5fc8ad4985b010e8fcd95e27c419a7e8fb4001919f8307ac81610b542b235ff4939015b29c6a9d93e683c38bd99c3a32f615e8633853a9cb83162410fd8379b98d34f25fcaf066807f231086e7e800230fe5efc84d4230e2d2e0f4b748095070a610515fc5863ece0b98ab458c1652c61bf8755e4949e3d5ae4073666c86e23adcb4b37bbda99a5efe717004ef69977a917dcb142b15820845853b645cd9eefab7aacf1650912dd8bdde8fb1ba74a15a362c53a8484071819ba9c9669fc446ae1847e26641fd305af9f30c85fdb729eb0dede28e08e3021315e6f8d5adfc06b3a0e4cf496d94e765a142ea89ef5dcaf6fa5f2eb2bcd78334f398af6a7537f7710fcbdea3cab20039989e7acd83dbf213e90d45537f01f05b7b1016940523c4982c749c0af011ee8003f77a6ad056dd0843c72c8e1043959e1927688aa105aa6b4bafb8231307234c60b0abca5a36238936628cf9cd57221b7679c019d480476c678bde9e72f0c509e22373da247ef299557fcd59614e7b1040223f40ab31b4c312d2bae2c170dded4fafc47854c9a9bb99a8e849ce4ab979c1f60bcaa7c9fc474c822249c66cacbd5a55597105823d62894119b1984f7da04662b65f03b3074", &(0x7f0000001200)=""/122, 0x1, 0x2, 0x0, &(0x7f0000001280)}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 21:05:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 185.619197] CPU: 0 PID: 7905 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 185.626372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.635739] Call Trace: [ 185.638348] dump_stack+0x138/0x19c [ 185.642006] should_fail.cold+0x10f/0x159 [ 185.646172] should_failslab+0xdb/0x130 [ 185.650155] kmem_cache_alloc+0x2d7/0x780 [ 185.654328] mmap_region+0x602/0x1030 [ 185.658144] do_mmap+0x5b8/0xcd0 [ 185.661518] vm_mmap_pgoff+0x17a/0x1d0 [ 185.665417] ? vma_is_stack_for_current+0xa0/0xa0 [ 185.670264] ? __fget+0x237/0x370 [ 185.673732] SyS_mmap_pgoff+0x3ca/0x520 [ 185.677710] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 185.682989] ? do_syscall_64+0x53/0x640 [ 185.686961] ? align_vdso_addr+0x60/0x60 [ 185.691015] SyS_mmap+0x16/0x20 [ 185.694292] do_syscall_64+0x1e8/0x640 [ 185.698174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.703020] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.708223] RIP: 0033:0x459829 [ 185.711493] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 21:05:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:18 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4810, r0, 0xfffffffffffffffe) [ 185.719200] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 185.726467] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 185.733737] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 185.741002] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 185.748282] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:18 executing program 4 (fault-call:1 fault-nth:6): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:18 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000200)=0x84) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) getrandom(&(0x7f0000000300)=""/216, 0xd8, 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @remote}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) modify_ldt$write(0x1, &(0x7f0000000400)={0x1f, 0x101000, 0x4400, 0x2, 0x2, 0x9, 0x400, 0x1dc1ae1a, 0x6, 0x8}, 0x10) 21:05:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 21:05:18 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x2, 0x10, 0x400, 0x43}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x19, "5284679ba28ad65ea8c8daa7f5af02d0e1c4e5688a0cfa3d55"}, &(0x7f0000000140)=0x21) [ 185.900425] FAULT_INJECTION: forcing a failure. [ 185.900425] name failslab, interval 1, probability 0, space 0, times 0 21:05:18 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) write$smack_current(r0, &(0x7f0000000040)='/selinux/status\x00', 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2000, 0x0) 21:05:18 executing program 1: r0 = syz_open_dev$radio(0x0, 0x1, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) [ 186.015602] CPU: 1 PID: 7934 Comm: syz-executor.4 Not tainted 4.14.134 #30 [ 186.022684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.032086] Call Trace: [ 186.034701] dump_stack+0x138/0x19c [ 186.038355] should_fail.cold+0x10f/0x159 [ 186.042518] should_failslab+0xdb/0x130 [ 186.046500] kmem_cache_alloc+0x2d7/0x780 [ 186.046516] ptlock_alloc+0x20/0x70 [ 186.054292] pte_alloc_one+0x60/0x100 [ 186.058097] __pte_alloc+0x2a/0x2d0 [ 186.061739] remap_pfn_range+0x87d/0xaa0 21:05:18 executing program 1: syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) [ 186.065815] ? apply_to_page_range+0x6a0/0x6a0 [ 186.065829] ? rcu_read_lock_sched_held+0x110/0x130 [ 186.065841] ? kmem_cache_alloc+0x611/0x780 [ 186.065854] sel_mmap_handle_status+0x15c/0x1e0 [ 186.065867] mmap_region+0x852/0x1030 [ 186.088427] do_mmap+0x5b8/0xcd0 [ 186.091986] vm_mmap_pgoff+0x17a/0x1d0 [ 186.095889] ? vma_is_stack_for_current+0xa0/0xa0 [ 186.100736] ? __fget+0x237/0x370 [ 186.104204] SyS_mmap_pgoff+0x3ca/0x520 [ 186.108185] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 186.113129] ? do_syscall_64+0x53/0x640 [ 186.117126] ? align_vdso_addr+0x60/0x60 [ 186.121203] SyS_mmap+0x16/0x20 [ 186.124485] do_syscall_64+0x1e8/0x640 [ 186.128370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.128391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.128400] RIP: 0033:0x459829 [ 186.128406] RSP: 002b:00007ffad723ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.128415] RAX: ffffffffffffffda RBX: 00007ffad723ac90 RCX: 0000000000459829 [ 186.128423] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 21:05:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:18 executing program 0: sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0xf4240) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x758, 0xffffffffffff7fff}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x9, 0xc7d, 0x100000000}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x4e22, @remote}}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000180)=0x100000001) 21:05:18 executing program 1: syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) [ 186.163837] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 186.171120] R10: 0000000004000012 R11: 0000000000000246 R12: 00007ffad723b6d4 [ 186.171125] R13: 00000000004c5d1b R14: 00000000004da6b0 R15: 0000000000000004 21:05:18 executing program 4 (fault-call:1 fault-nth:7): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 21:05:18 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x4}, &(0x7f0000000100)=0x8) 21:05:18 executing program 1: syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:18 executing program 3: syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x3, {0x4}}, 0x18) 21:05:18 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xf3b5, 0x4) 21:05:18 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_WRITE(r0, 0x0, 0x0) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 21:05:18 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0xfffffffffffff27b, 0x3, 0x2, 0x7}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x1f7}, 0x28, 0x2) 21:05:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:18 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4000012, r0, 0x0) 21:05:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:18 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080), 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:18 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:18 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:19 executing program 0: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, 0xffffffffffffffff, 0x0) 21:05:19 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 21:05:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) clone(0x20000, &(0x7f0000000040)="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", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="411cb0d4aefc03f3141bd7faf6086e1dd320d73bc37e9065264b701fb66058a9ccb0841bb0ca4cdba00ddfe679d22f1737fc7b783679711421c082aff88a0d6fe2a789b6ec937702e86d127cd7f98723359ced439a457ccdf68fdeb08a68125807afa95dd42acc10d8e2e17fa40e4730308bb2d57480471b3579d1120d5541d3fd30be5656d600e4c2e7255bf856ff8038b5952d43302461aa81e456ae4896d7955e8534b19a88b07ee154dafc0a173daab4ae153cab551121583651fc94c09d") 21:05:19 executing program 0: prctl$PR_SET_ENDIAN(0x14, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x1, 0x80, 0x7ff, {0x0, 0x989680}, 0x8, 0x8}) 21:05:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="9a000000c790da6e3ecadb8cbb4ec09c2f31d404cd036259512b120482436ca5e139862b05bf6a6fc01f04e7623282279f3f5b80ffcab89f3789b67f8ad009ec6cc3507cc1b945e299194f60efb66a3117bf891bd3a597aca8898248ad26e190a397af66ce3d4d094ee9a191b61310df69c2e1906bcb291310bf002740ca672ac1cc17b985cefe08a4a916a0e46d21c56ddbbc9a7ba757e38ceddcd02335737d2b601a1fd47efa53edf98755b64274c1cbc527ab2bad9a86111e8439339f73e623f0db407b7efae0e9c5e84a76c7f02822cc6da55535ac4690a895f9bff30a45db13f1307b1ffab2f9a0bcc2755ccca3914bad145173d70d1b859e480171846560a9f20b05ffbc37a2f0075d88c2f5a2d53b07aa0320bff7a92942ba2886a2cbea094bcadf496ca59de96f2e000000000000000000"], &(0x7f0000000100)=0xa2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1}, 0x8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) 21:05:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="c2a2a2c8299c850b0ca8a153ee24868d889c65da70e1809aaeb6e0276b7ea87e7bfb4928e4b32951bd0db3f086a66089545c1c22e190f14f97dbeb507f4aff5ca3be6dca5c74ebbe6e53e2263f47a87d16f3e76985676de1649e1a3265c5f6e5c1ce1d5bbab2d12ae7d10bbfc6da70f942dbcafb2f4f0c63f8632f0727bdda21a7e4ef24c7685d0285ad4b1469a1d1b83959649ce01304", 0x97}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xc86}}], 0x60}}], 0x1, 0x90) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x7fe0000000}, 0xb) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x9, 0x1fffffffe000, 0x6, 0x7fff}, 0x6) 21:05:19 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/162) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x6, 0x4) 21:05:19 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x40) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none='cache=none'}, {@posixacl='posixacl'}], [{@hash='hash'}, {@smackfsfloor={'smackfsfloor'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x2ac, {0x0, 0x3, 0x101, 0x358503ae, 0x100, 0x400000080000000}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 4: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="787365722e2f73656c582f73746174daf7c3e1872d840b36000065b3ea760068a33e46ba6d4258a8ec2c03e506990d6ce3f3d34bc20c20a927d0b6688d89bb2207e8cbac28d556e07558aa89461d4fe7a510f282332a"]) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x8}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:19 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/102, 0x66}, {&(0x7f00000009c0)=""/224, 0xe0}], 0x5, &(0x7f0000000480)=""/47, 0x2f}, 0x2}, {{&(0x7f0000000b40)=@ax25={{0x3, @netrom}, [@default, @rose, @default, @netrom, @default, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000000bc0)=""/132, 0x84}, 0x9}, {{&(0x7f0000000c80)=@ipx, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/221, 0xdd}, {0x0}, {&(0x7f0000000e00)}], 0x3}, 0x100000}], 0x4, 0x40, &(0x7f0000001e80)) creat(&(0x7f0000000100)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7ffe, 0x8000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r3, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x8000) 21:05:19 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x1, 0x9}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001ec0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x8, 0x8, 0x7, 0x36b1, 0x400, 0x4, 0x8, 0x3a56, 0x2, 0x1a2000000000, 0xffff, 0xcd, 0x4, 0x3d51016b, 0xb6]}, &(0x7f0000001fc0)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002000)={0x0, 0x80000001, 0x7f}, &(0x7f0000002040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002080)={0x0, 0x8, 0xc, 0xae8, 0x1, 0x0, 0x1f800000, 0x2, 0x0}, &(0x7f00000020c0)=0x20) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000003680)={0x0, 0x0, 0x2080, {0xd002, 0x0, 0x3}, [], "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", "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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000003340)={0x0, 0x5}, &(0x7f0000003380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000033c0)={0x800, 0x1, 0x1, 0x5, 0x0}, &(0x7f0000003400)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003500)=[{&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x38, 0x8000}, {&(0x7f00000001c0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="1f2158ec858bb2e65d571159b0fd425457882b9dbc9a838f994cbb0ae12cf8a48a11de93fae0fa9a051f17362a7e1b135315e449c56bf7729117f95ed7b2f0424c2de0feb837723b7ccad208867d15c0ca1e119f19761bf05683599f4c30b63b1edae23e775d51cb3611f80d1d3595d47d1affb61a43e20058d69e67809a7dcb2b5e366c2e60847f4a77bff072102649a42f1c913cc9994a583b8716db53d0e799c143eed5e66c", 0xa7}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x81, 0x4, 0x9, 0x7, 0x80000001, 0x2, 0x6, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xe5, 0x36c, 0x8, 0x5, 0x8000, 0x4, 0xffffffff, 0x100000001, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xe0, 0x1}, {&(0x7f0000000500)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000540)="575d92b4957d8ca221cdb90e2f7f8cc90fa45a25134fcaa403d74801", 0x1c}, {&(0x7f0000000580)="c194556f4631e792b8c3f4df775a8d8da3e4e982cab38a6da28a9961d243168ee5c280c8b1c0586ea5825e13a3f4b8a62699a7312f850d75cf54189c869e96fa2eca16ad56a2dca9a5abf89e7b901e1ca3ad73dd3b5f5788cdc7eb4074283e01dbd22b0bcecd4b6b67ac66b864068dd7e04663362290", 0x76}, {&(0x7f0000000600)="1ea6e359521852c963388846e7e6f19dbfd2a890c467cbe0092340b64b3cc0e04d78c049826b35727a396fe950f9295e5ab826d795e3d43d0bf6f129e2feecb234dee5e7e6f1bf29de917f23adee230ab85a1a6e7be112d2c3cee2d8735f8f0cb6f084b6b8bdcbf677c9e2385a101e46451ec9d9f88c68827444e31d667cdbe3b47b7db65184d615f4ac61f4a8a2e9175f0eb874fa72c587a0274f4f41ccecb1cff91f5e926de1a2882eaeedc2251b859be87113c28662bbc5c039ff24fcd539788ae590b9b482c438", 0xc9}], 0x3, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1ff}}], 0x30, 0x50}, {&(0x7f0000000780)=@in6={0xa, 0x4e24, 0x6, @mcast1, 0x6}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="57555f610c61cd7f879a28f4f6eb8a4c73b4cc3ba1660d322fd17a9665aed884a754264ff5130cb70d6815e2ee18f519e7df9173a7390dfa", 0x38}, {&(0x7f0000001800)="4e2e094b4ce413d5a1ed87908948b9b6a249cf4885713a35a399d94e78fd0ceccc5d853bd9a0c23fba425bd33ce68622f23d31f88fdc5057d710ba576d970300e4917067f6741a1072c2ded4a152819ac1cd4d388754a627da412083f212e6bb6be17620cec2a1e3a07d30e63437f4d8eae73066658dd90b80948c95d26b54495a9f9da14317aafa65e3a8cefd2b187ee735b84ca972549dfdac15ca32f753d2e31839aab251fe4e5470c1fcfb4744d88ce34fc16c8ed6ba2bd4fdaa088e85871e8f439f594219db7fa66e3db190135f33e2747533b76d349293eea881e4e6ed7ae6f37d0939d55984c5e6b9d486211213a74989ae32a54933047089d1", 0xfd}, {&(0x7f0000001900)="06b7db49c1a9311aad1b9e8a7a259adbf069623935328f8446e7d77ffb3fc9dd5af060416a055ebdcaec623c815dcb2c7ac0c43b670c6115f6e18562d62b1a672358d73cabb5e84f67d659097b5f5a86a1ff755200ee40f5dab51606951f77c3e07a49ce7864b3b58afaeae664b85dff3e99185ad2826ce260baef45d484cda79c9b9902ce70b2196618caace150faa019591fd7298b9f145a", 0x99}, {&(0x7f00000019c0)="998de8758ddb0445aacd9ad275385012aa17e4393383d87b94671684a8c1b1f4e627c2a7e1f7af7619841d520445cdba50f5cbc6194e266b37f978e87d8595c9e07c58158243bacfda6a445259d919b9b8ed77229c4af5316ba272d516fe82d3f90aef1112537864379ce0c777e8f1c21031e53d8f51f785a6273ade309bce70237e646c8a90029b918a92f091a7b556079667bed4467badb51ed19a5f31fa946c53d86191299948e3bb32b00b0aed", 0xaf}], 0x5, &(0x7f0000001b00)}, {&(0x7f0000001b40)=@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x28}, 0x3}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001b80)="0cb0c2cf3fb299574f644962e470a5295dc4d4f1fa95c22624bc", 0x1a}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="e4cd9428df1fc78a2a216f3843e551df328ac1164c439c11d638c128021b27aa42da138b9950f4741495bb422590d24f1ba9a4a63d364ab602d8a8e62cdbffac8f125e1504f28f9ee791daa026a43f2565b6ef6a83e1f3decb265392f4f9fb404b3a8f64412f0741ff6ea44bb10cc05a3ad6f4a7836af1c646d7fb7e1a3de27bf56215e4f20e560c9c7493fa5195b803ccd3f050c8bf03ba859ed87f0137dd984eff063653ffbf2483804f363aed83e1a4c8c484e68b78565f45eace1a8d65eb", 0xc0}, {&(0x7f0000001cc0)="487a880566b57c93bf96e2d847b532840e9a55a5f577942b5e7a35054d1217e57ff5c6990ac9bae141df182d300a6cf12dd59e706444b1a0cbc0af9c1fea21003cfd5caab908aa1f645746c3ca18bc0a3fdec76e2f60832aeb979e6cf3dea8dcc2058d3976c6ec3e57487ade08248ca88cef4d067f6efe7c1ffb829011e833037629a918ab70f21e7c6afa829b4828142d85b70cf5b7b23dbcf12145597e858e19f622f54dcc52d6ec1fdc6f881b4f7f3a31db", 0xb3}, {&(0x7f0000001d80)="4f814e639546f3de1351890f99ef9988f8cce2a5dde4c472a4d92f6810605b52692fe3f01c5bd252f33f274941a8803f1a68b8fc5a4d60db09cee0a1985118fe9d390824b1101f2b9afa302659608e55e118e3d8099f783f803febe45b507c4ea73ea4f07b1f6899adb82b36d433d69046054fdddea190dd15", 0x79}, {&(0x7f0000001e00)="88b72ab27e10e9d746d6", 0xa}], 0x6, &(0x7f0000002100)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x200, 0xda9, 0x100000001, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x7, 0x6, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xfffffffeffffffff, 0x8001, 0xffffffff, 0x0, 0x100000000, 0x100, 0x100000000, r6}}, @authinfo={0x18, 0x84, 0x6, {0x1000}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x45b}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x8, 0x80000000}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}], 0xe8, 0x4080}, {&(0x7f0000002200)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003300)=[{&(0x7f0000002240)="0ed6f9235ab6a4d8e7876376909bdbd323731d2fbbbb7da2ba4112821f0e35de1fc002a2689608fbb9c4e5c252e650ac3e0bbbcb6591a6bf148f548d296e47cd95a0f8e337d805c0e490ac49f23f41d29cecfe3f952eee65fa2ae9fa76cc89c046175b53e5fe8aebc67c80cc392180b6e819a5a0eb122553a009f04c805cd8e95e47a9511789b1a79f323205100580f739b383ce42", 0x95}, {&(0x7f0000002300)="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", 0x1000}], 0x2, &(0x7f0000003440)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x4, 0x3a81, 0x7, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @init={0x18, 0x84, 0x0, {0x1, 0xfffffffffffffff9, 0x7, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x820b, 0x0, 0xfffffffffffffc00, r8}}], 0xb8}], 0x6, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) 21:05:19 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x10000, 0xbd7a}) r1 = geteuid() r2 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00020000f5ffffff00020000000000000300000000000000010000000000000004000000000000000400000000000000ff0f0000020000000500000000000000000100000000000001000080000000000100000000000000ff010000000000000100000000000000ad0000000800000001800000b9060000ff0f0000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000008023000000000000000600000000000000f26fffffffffffff10000000000000002f73656c696e75782f7374617475730006000000000000000200000000000000010000000000000001000000000000000800000004000000040000000000000008000000000000000c0a00000000000000020000000000000600000000000000d00000000000000002000000000000008000000003000000f0520000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="4d00000080000000000000000100000000000000020000000000000005000000000000002970726f630000000300000000000000030000000000000004000000000000008b0000000000000008000000ff070000040000000000000001040000000000000500000000000000000000000000000008000000000000000100ffffffffffff0000c6be730d0000010000000000008001040000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0800000000080000000000000000000000000000040000000000000010000000400800002f73656c696e75782f73746174757300"], 0x200) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0xa7b7582ec985b743, 0xa}) 21:05:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffd, 0x4000011, r0, 0x0) 21:05:19 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:19 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0xc6d17b9ad5082ac2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r1, 0x500}}, 0x10) syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x1, 0x200080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000012, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c9b51359", @ANYRES16=r2, @ANYBLOB="00042bbd7000fedbdf25120000003c0004000c00010073797a310000000014000700080001000d00000008000200050000000c00010073797a31000000000c00070008000300080000000800020004000400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40081) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x81813, r0, 0x0) 21:05:19 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x50d2, 0x400900) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./bus\x00', 0x80000420) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000c01000000000000000000000000000000000000000000000000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e64000000687773696d3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000800000000000000000000000000000000000c800ec000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010015401000000000000000000000000000000000000000000000000240069707636686561646572000000000000000000000000000000000000000022000000240069636d70360000000000000000000000000000000000000000000000000000016000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800cc000000000000000000000000000000000000000000000000002400"/1026], 0x2) unshare(0x8000400) r5 = mq_open(&(0x7f0000000740)='mime_type\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r5, &(0x7f0000000900), 0x8000fffffffe) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x13, &(0x7f0000000180)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x104000112, 0xffffffffffffffff, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0xffff, 0xa5, 0x7, 0x401}, 0x8) 21:05:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:19 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x3, @raw_data=[0x1, 0x0, 0xe0, 0x5, 0x3f, 0x3, 0x9, 0x100000000, 0x7, 0x3, 0x8, 0x2, 0x0, 0x7fffffff, 0x3b7f, 0x4]}) 21:05:19 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1a) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x200) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x2, 0x1, 0x6}, 0x20}}, 0x18) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000640)=0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000800)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getgroups(0x3, &(0x7f00000008c0)=[0x0, 0xee01, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f00000009c0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="a76ca9086ea3010112ae56b9d5f85f575496c3acd8e879c260739edbd08eaea09584318641a216b0cc95e272ed3b5ea0d68399823033f55ce6d6c9bd257acb768bfc01f7e99e546962c13a8eeb6d10d50a48dfd31ddf99477a706c53bde0898385f346965e63ffc39131408c42", 0x6d}, {&(0x7f0000000140)="728ac57ee286827c23452678f41d7ac35a7193a9f5b2eea8c689477566bd569a2643db97b60cd9838ad10fdf762cbdff69c3640084330b", 0x37}, {&(0x7f0000000180)="9cdf5ca305edab917f293041931a2f9fc42cee5516782c6e1222b707ebcc857419debbdb81fb8afc689a94fb3a584f0240a5f860b4e6c4036f380fed181758186cab2cf6e8d68b865f5cdee08b6971", 0x4f}, {&(0x7f0000000200)="3f57275fd6844c4af2b3a6fe7033e5af0f4e3d67a5e90f42c8cecb407772e3e183df581d2d977df9a846267e1cc0b8eac5739841395c212c7e35cf5613f9bf024de99f369614c90f9671952e2541daf3e50efae0b802362be58b5eac0a4c8a1bb5b8185a1b56420fe56a8c5f368bfeac19414e362edd64e10913cc365acd78af2345cda983768a3253fa082f201eab861f6462b18d21332f5d37a00e1030cae9194f2fb8b71acee77e1a4f16e4ffd8b2fa5fdff9d57f2710d0da3945910de73e31a4e5455f833add1551a052122a103cea0a778bad89c4c689b16e23a02d76ff75910d481fc6ce4a98ba40", 0xeb}, {&(0x7f0000000300)="ccb06af5833078fcbe99d0e4441c109cc11ffc9036fad46b5b2b69b8382a2df30586ad310338c92ec57fd62a0e457e80352e6725e74f5a3478606a3b8d27e5a29828a389f4d798ea0ed339633e9726c3d38805d6e7defe50f382fb3ad0f455eb1ee4071aae1bb3ec8148b253c0ece45f7571ac277ca14c620ba4cee68c715b61056014150f6cf0de031af75e2cedd3d467cf3ac7e2e4bb5f64a6841fc499cb3c3f65eb82e5a32d1df9bb664857ef06e9dbd101eadaedae8e18", 0xb9}, {&(0x7f00000003c0)="a103d04abeb5562a243a0096eeecc61761c9875052959284e364ed1b158673d09dca77d19a2950c6db58cf25011c6397cec39739a2055965ced1fc4033b979785935ace8a3ddbdcc2c348cfa5e8457713dcaeedf9942dc27f5edf3dcfd43cddb2c4c6cac7c1ec2027ee28b53958c6dfcd267caf21ff3dcc3a92fa7dc507d86c1f794ba985ef109e921714cc3cf0d5ba594dc2a26479189586fb8db08221dc0517a97b0936fff7fedad72645dadd26386a3", 0xb1}, {&(0x7f0000000480)="d65e3b2e7985a0003674fb5952301fc90f85c0e98f228b5ca4d3739a2604e33e43883f6c323c046dd8ab611ddd49ad8cbf2c43d3091c41dd8ce2dc5376d7938b3f8d4e8bb87cb8f72c8f2dfb767c31e0ddc1dffccb93f0e4b9fea82c5dab4f5a66746e6e", 0x64}, {&(0x7f0000000500)="42a5d3575377985586fd6bd7e1ba114252fd1e9a4006f798ef81bd6e1d705fcf595755176cc7eee243bfc269bb175bf2306f90f119866a6576d1bd2ced84e34e5be1dc9fa68822cac69294a2bc21ca6c1bedcd1d0620bd5a53ebadc3a847de65c631abde0d4ee591da2e0afe534f56b96ba2da2ef5e498c13098d483163140381a0e67c79cc26496f6d6b2860d88e8b49a", 0x91}], 0x8, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}], 0x88, 0x40000}], 0x1, 0xe7acd5a6dfa92cf7) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4080) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x8001, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x1, 0x7a16, 0x2, 0x5, 0x4, 0x6}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x81}, 0x8) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1a) 21:05:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r4, 0x89e3) 21:05:20 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/102, 0x66}, {&(0x7f00000009c0)=""/224, 0xe0}], 0x5, &(0x7f0000000480)=""/47, 0x2f}, 0x2}, {{&(0x7f0000000b40)=@ax25={{0x3, @netrom}, [@default, @rose, @default, @netrom, @default, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/9, 0x9}], 0x1, &(0x7f0000000bc0)=""/132, 0x84}, 0x9}, {{&(0x7f0000000c80)=@ipx, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/221, 0xdd}, {0x0}, {&(0x7f0000000e00)}], 0x3}, 0x100000}], 0x4, 0x40, &(0x7f0000001e80)) creat(&(0x7f0000000100)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7ffe, 0x8000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r3, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x8000) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x14000010, r0, 0x0) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:20 executing program 4: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fstatfs(r0, &(0x7f0000000040)=""/203) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) listen(r0, 0x8) setsockopt(r0, 0xc9, 0xfffffffffffffffc, &(0x7f0000000100)="b7947a44ebecccdd3759817466ca134c3d452ec38cd0cc77cc007d7c40cb7987da9e0b76016686defdfee20ebd1be795eea2f861e65898c0afdd8e537544f397161c6c6bcca65fd8d24f459bef9c305a16e6a9d1531e81081e78977e0df0be901e76e2177259d6d58055a61e727e97c0da89c474c9ecfd87c440b12cb74474e1b1ddeccb13c11fe9011691460a90801d24640c37b713159a914316e11e757729e36e3af35ef90a2cdce7c1a6a811259b9f661f96afd76dcb0a55d94ac619bd90f5c52e06076f957ef68b100fc780669f4434a32bd1a88fa4cb0bcd892e740d8742189bebe66434f2148c5f1523aa624f307524", 0xf3) 21:05:20 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4080) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x8001, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x1, 0x7a16, 0x2, 0x5, 0x4, 0x6}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x81}, 0x8) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1a) 21:05:20 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="071e621ac5c5530cff9109db438f833c", 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x400001f, r0, 0x0) 21:05:20 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x400001f, 0xffffffffffffffff, 0x2) 21:05:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:20 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x50d2, 0x400900) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./bus\x00', 0x80000420) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000c01000000000000000000000000000000000000000000000000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e64000000687773696d3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000800000000000000000000000000000000000c800ec000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010015401000000000000000000000000000000000000000000000000240069707636686561646572000000000000000000000000000000000000000022000000240069636d70360000000000000000000000000000000000000000000000000000016000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800cc000000000000000000000000000000000000000000000000002400"/1026], 0x2) unshare(0x8000400) r5 = mq_open(&(0x7f0000000740)='mime_type\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r5, &(0x7f0000000900), 0x8000fffffffe) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x13, &(0x7f0000000180)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x104000112, 0xffffffffffffffff, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0xffff, 0xa5, 0x7, 0x401}, 0x8) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:20 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x7e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100019, r0, 0x0) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20010, r0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000000)='\x9a\x96m\x91\xb8\xc8\x1e\x0f\x9e\xfbk5\x9es\xa3c`', 0x11, 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000400000000000000229d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004001e0003000000050000000000000000000000010000000600000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000ff0000003d5500000000000001000000ffffffff01000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa00"/448]) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) 21:05:20 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffff7ffffffffc, 0x4000012, r0, 0x0) 21:05:20 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 21:05:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:20 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/51, 0x33}], 0x3, &(0x7f0000000340)=""/106, 0x6a}, 0x1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/172, 0xac}, {&(0x7f0000001680)=""/77, 0x4d}], 0x7}, 0xfffffffffffffffb}, {{&(0x7f0000001780)=@x25, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000001900)=""/24, 0x18}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/225, 0xe1}], 0x5, &(0x7f0000003ac0)=""/78, 0x4e}, 0xc68}], 0x3, 0x0, &(0x7f0000003c00)={0x0, 0x1c9c380}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003c40)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000003d40)=0xe8) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000003f80)=0x81) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003fc0)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000040c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000004100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000004580)={&(0x7f00000042c0)=@polexpire={0x2a0, 0x1b, 0x4, 0x70bd29, 0x25dfdbfc, {{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x0, 0x4e24, 0x4, 0xa7bf8f93bd24ede6, 0x80, 0xa0, 0x0, r1, r2}, {0x2, 0x2, 0x10001, 0x1f, 0x5, 0x401, 0x7, 0x5a3}, {0x3, 0x20, 0x4, 0x2d68}, 0x1000, 0x0, 0x3, 0x1, 0x3, 0x1}, 0x52}, [@extra_flags={0x8, 0x18, 0x9}, @migrate={0x30, 0x11, [{@in6=@empty, @in6=@remote, 0x2b, 0x3, 0x0, 0x3502, 0x0, 0xa}]}, @sa={0xe4, 0x6, {{@in=@broadcast, @in=@loopback, 0x4e22, 0x0, 0x4e23, 0x416, 0xa, 0x20, 0x20, 0x6f, r1, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, {0x5, 0x81, 0x102000000000, 0x2, 0x0, 0x3, 0xffffffffffff7fff, 0x7}, {0x5, 0x6, 0x3, 0x5}, {0x3, 0xffffffffffffffc0, 0x1}, 0x70bd28, 0x3504, 0xa, 0x1, 0x5, 0x24}}, @policy_type={0xc}, @ipv4_hthresh={0x8, 0x3, {0x17, 0x1c}}, @ipv6_hthresh={0x8, 0x4, {0x14, 0x66}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7f}}, @algo_auth_trunc={0x98, 0x14, {{'nhpoly1305-sse2\x00'}, 0x258, 0x200, "affbdbff4268a97325c1ed96bdc4c0aaa242df9097072249381274c40954ca46ec98a5f90e12edf3f91affd5f1ce12e8ad4783090c9bb774b981e6381c18b59922a94ed5cdce82d1c8348d"}}]}, 0xffffffffffffff64}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:20 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1000001, 0x10, r0, 0x4) 21:05:20 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x50d2, 0x400900) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./bus\x00', 0x80000420) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000c01000000000000000000000000000000000000000000000000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e64000000687773696d3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000800000000000000000000000000000000000c800ec000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010015401000000000000000000000000000000000000000000000000240069707636686561646572000000000000000000000000000000000000000022000000240069636d70360000000000000000000000000000000000000000000000000000016000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800cc000000000000000000000000000000000000000000000000002400"/1026], 0x2) unshare(0x8000400) r5 = mq_open(&(0x7f0000000740)='mime_type\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r5, &(0x7f0000000900), 0x8000fffffffe) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x13, &(0x7f0000000180)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x104000112, 0xffffffffffffffff, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0xffff, 0xa5, 0x7, 0x401}, 0x8) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x4) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/187) 21:05:21 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x4) 21:05:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x10000000000, 0x4000012, r0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400000) 21:05:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x400001f, r0, 0x0) 21:05:21 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x7d6, @multicast2}}, 0x200, 0xfffffffffffffffa, 0x5763f84e, 0x8d5, 0x40}, 0x98) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) 21:05:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x200000004000010, r0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xfffffffffffffffb, 0x19}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={r1, r2/1000+10000}, 0xffffffffffffffcc) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @src_change}) ioctl(r0, 0x7fffffff, &(0x7f0000000340)="825bbf2101308bca641f31107e444b56b3b281304c84d864f69449c33b5c9fda6c09658cbd05c686ee85f02e98759cb1f9910e09854e7b9a8be0b05d50fd16642b21e8b669767cfbf7e6a9bc8b5b2891c5b19eb04578b46f1d0c2bd9c344e0dfc389338ac1d5cabdb5e496cda30b0ead23b1bb5188917e3bb03935a784") getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="0403000400ff4c06004d070000000000000000"], &(0x7f0000000240)=0x16) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000280)={r1, 0xff}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000300)={0x1, &(0x7f00000002c0)="65f1fa950f60699019bd0167a0f95ac6405d01a661ebde2d136f0882bea795d492a7308799e3dd1c"}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x50d2, 0x400900) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.current\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000680)='./bus\x00', 0x80000420) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000c01000000000000000000000000000000000000000000000000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e64000000687773696d3000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000800000000000000000000000000000000000c800ec000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010015401000000000000000000000000000000000000000000000000240069707636686561646572000000000000000000000000000000000000000022000000240069636d70360000000000000000000000000000000000000000000000000000016000440049444c4554494d45520000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800cc000000000000000000000000000000000000000000000000002400"/1026], 0x2) unshare(0x8000400) r5 = mq_open(&(0x7f0000000740)='mime_type\x00', 0x6e93ebbbcc0884f2, 0x4, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r5, &(0x7f0000000900), 0x8000fffffffe) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x13, &(0x7f0000000180)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x104000112, 0xffffffffffffffff, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0xffff, 0xa5, 0x7, 0x401}, 0x8) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200082, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x8}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x7fffffff, &(0x7f00000000c0)={0xffffffff}, 0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000000000, 0x4000012, r0, 0x0) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x81) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 've\x95j0\x00\x11\x00\xa2\x902\xb0\x00\x00\x04\x00', 0x1}, 0xfffffffffffffe01) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x88000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x4000012, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x800}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 21:05:21 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a80)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)=@bridge_dellink={0x58, 0x11, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x1000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_LINKMODE={0x8, 0x11, 0x3f}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_CARRIER={0x8, 0x21, 0x200}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x804) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x400001e, r0, 0x10000) 21:05:21 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/40, &(0x7f00000000c0)=0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r0) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xf, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xfffffffffffffffc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x400001f, r0, 0x0) 21:05:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr(r1, &(0x7f0000000040)=@random={'osx.', '/selinux/status\x00'}, &(0x7f0000000080)='/selinux/status\x00', 0x10, 0x2) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x420001e, r2, 0x0) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:21 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 21:05:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:21 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000012, r2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 21:05:21 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x14010, r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x7f, 0x0, 0x1, 0x4, 0x1, 0x6, 0x6, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0xfffffffffffffffb}, 0x8) 21:05:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000012, r0, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x10000, @local, 0xec6}, @in6={0xa, 0x4e20, 0x8, @remote, 0x6}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @rand_addr=0x7f0000000000000}], 0x88) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000300)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x1, 0x7, &(0x7f0000000180)=0x6}) keyctl$describe(0x6, r2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r0, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getgroups(0x9, &(0x7f0000000100)=[0xee00, 0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000340)=[r1, r2, r3, r4, r5]) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x60b9, @mcast1, 0xd3d}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$capi20(r0, &(0x7f0000000040)={0x10, 0x9, 0x83, 0x83, 0x7, 0x5}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x40}, &(0x7f0000000100)=0x8) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 0: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 21:05:22 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40000) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000800), 0x4) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) r6 = geteuid() r7 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) r9 = geteuid() getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x6, r2}, {0x2, 0x5, r3}, {0x2, 0x3, r4}, {0x2, 0x6, r5}, {0x2, 0x6, r6}, {0x2, 0x1, r7}, {0x2, 0xddd8d7f4f58ebd97, r8}, {0x2, 0x1, r9}, {0x2, 0x0, r10}], {0x4, 0x2}, [{0x8, 0x2, r11}], {0x10, 0x1}}, 0x74, 0x1) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r12, 0x0) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/82) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) ptrace$setopts(0x4200, r3, 0x6, 0x20) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) sendto$inet(r0, &(0x7f0000000300)="83dc4b0339edb8607731f21fa1b382a78020e7b0e84a23e8cfa5daafef6df5c8295db3214bd1481299874bef2c27fd57a521e2b0e3d84f2930436a7b2688e83a348f25ab2bbff8f1dc652c1f88a5010200216b90ca6b175b843cd810751b30572fa50be612cbf2d87f24a8f21675d23bf25473c7a18bfe08dc30ec19b7d7f3f00a4751b75003eac82e04ad44275d2d2c", 0x90, 0x44841, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r2, 0x46, 0xd4}, 0x0, &(0x7f0000000180)="f7ecf93580e0def4e4428ac3714119fa2f7e6f003eb65eb86cb0aa02b5a9057edad52044e179efa2c90c690daa6ea5ed6edc2702b2eec174838897e7f34bd23f872e4dc6a360", &(0x7f0000000200)=""/212) 21:05:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d0000000c6903005cf1abf77aec2e775ffd08e2260070905703793e50b97880091f014453f3d35d7b4000fac82ac66c65385fc7127b138a964c260b59eb0114977b5f22b9c0a386a9747ab23ab6a7202e7b5245e77f2840e555dd4baa7c53461af36baca02d6de72be375fdc19e05d53e1954d0147265977b6bd91177d409bb4527755007170d3a4156404a337dffdd45911ea97896002c08a4fa36c8f8144ecf49bf237888e3306cdc0c4e76b24dfef63e0d066a3d6fc3fb784f3ad5977f644203e7c274d4a7"], &(0x7f0000000000)=0xfffffffffffffeaf) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x9}}, 0x1, 0x8b8, 0x0, 0x343bb7b5, 0x40040010}, 0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x53d, 0x4, 0x2, 0x0, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}, 0x7ff, 0x7, 0x6, 0x5, 0x8d}, &(0x7f0000000180)=0x98) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x7, 0x1, 'client0\x00', 0x4, "50a6dfeded7f30d9", "f51f84a333f53ac48ba5f1d86e2de89d07455a21feeff41cd86befd1fee55dca", 0x2, 0x7}) 21:05:22 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000012, r2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) getsockname$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x8a, r0, &(0x7f0000000080)="10b0f65445982df01b1f0b059ed12e25b20a50c9b322db642cbef012014c4f7ef566e654f75f970894a57590cad283f2f427dc30b8e3dca037ed66d7673ddc4a00febbd75a730cdc0e62552b7b7fa2526de806033fae0fb0d1373794e054a22c921de0aaf51acb0092c9eb8aea2be06b87343a23a0c0c54f33ee2131e216494a2c4e3be9fc4647a4342b0da357ab02215a91e7ef61094d00dba9339539ae717d86bddbb36e132a2cc9e5e1d59ed63f81d03a2511058a2fc75befd2c48c63", 0xbe, 0x7fff, 0x0, 0x1, r0}, &(0x7f0000000180)) 21:05:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x7ff, 0x6) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001000000, 0x4000012, r0, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000180)=""/182, &(0x7f0000000080)=0xb6) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x3}, 0x28, 0xa358a9a943e48386) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x8, 0x4) 21:05:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:22 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:22 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x4) 21:05:22 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/172) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x1000000000000030, r0, 0x0) 21:05:23 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r2, &(0x7f0000001580)=',', 0x1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000040)=""/38, 0x3d0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:23 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6195, 0x3}, {0x4, 0x2}]}, 0x14, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000012, r0, 0x2) 21:05:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000040)=0x1, 0x4) 21:05:23 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x810c5701, &(0x7f0000000080)={0x0, 0x0, 0x1}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x7, 0x0, 0xfffffffffffffffa) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4535119e90dc1039) socket$inet_udp(0x2, 0x2, 0x0) 21:05:23 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) pipe2(&(0x7f0000000040), 0x4000) 21:05:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 191.050442] audit: type=1400 audit(1564520723.377:48): avc: denied { name_connect } for pid=8452 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 21:05:23 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '%selinux\'\'%nodevselinuxuserself&selinux-'}, {0x20, '/selinux/status\x00'}, {0x20, '/selinux/status\x00'}, {0x20, '/selinux/status\x00'}], 0xa, "d0d74581c7505f9a5c5706e2afae329d4617cad6f380f4aaaa3dfc09706552bd88b22e86a7db4c01909a170e017578b5e0eec71afa58f5f7206de43cb068f57b4823f7f4c102a10c92c998504df0342e51d14ad9047e53abda61ee2031b495eb0aee1d694595303ad4d47e852749571fae7cf13163d662621b1ecf15d494108f630c09226d705060e9c5794907b4b60d2113d63624360452ca38ed8e"}, 0x103) r1 = socket$nl_crypto(0x10, 0x3, 0x15) syncfs(r1) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 21:05:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 21:05:23 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6, 0x44100) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f00000000c0)={0xb9, 0x0, [0x8000, 0x40, 0x1, 0x2b, 0x20000000], 0x1ff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r1, 0x0) 21:05:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) [ 191.189211] audit: type=1400 audit(1564520723.507:49): avc: denied { create } for pid=8467 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 21:05:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x0, 0x1, 0x3, 0x2}, 0x280000000000000, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0x3, 0x1, 0x97}) syz_init_net_socket$ax25(0x3, 0x3, 0xca) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x32, "d9963caf93e9168746cbc9976704d95afd05f506e48db74df103dd0a546f4e054797c8553aefeaab1f01c4f5308b1e52dfab"}, &(0x7f0000000180)=0x3a) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x1, 0x20}, 0xc) 21:05:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6, 0x46, "16914fda8c7c96795bdacfa8209b0d0294857d0336eb69243ef78b80f5c25d1887d2f45e6de107fd20af95d7ae22cd0c0d35fce491745cb8919f94135910096514b960886d6e"}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) 21:05:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x7fffffff, 0x9, 0x7ff, 0x1, 0x4}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x2f, 0x1f, 0x3c, 0x8}, 0x10) 21:05:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x3, 0x4, 0x5, 0x7fff, 0x7fff, 0x99, 0x4, 0x16d671ed, 0x4, 0x16, 0x7, 0x7, 0x8, 0x400, 0x8]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={r1, @in={{0x2, 0x4e21, @rand_addr=0x9}}, [0xd0, 0x5, 0x8, 0x9, 0x12d, 0x80, 0x9, 0x8, 0x0, 0x101, 0xca, 0x66, 0x4, 0x5, 0x9]}, &(0x7f0000001300)=0x100) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001340)=0x0) sched_setparam(r2, &(0x7f0000001380)=0x80000000) bind$inet(r0, &(0x7f0000001400)={0x2, 0x4e24, @remote}, 0x10) recvfrom$rose(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x40, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000013c0)={0x9}) 21:05:23 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80000, 0x0) mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1, 0x101010, r1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x10001, 0x4, &(0x7f0000000540)=[{&(0x7f0000000180)="a806b928f85be57575f0d8fea7bc6da1045e354f6ffd613d0ab4c4818038154209fea7f4bfe332e8cfa2a4b32c74652bea397945326ef6bb5ea9abde5159082587a8459044aa389b1c4158a6c036dce4c12e8eee55b61e2689ffb16532c6091c54ab196e5204a4a084ce2d2637e6b58d120514108288e8c25d0b85ae35209bf26d3b672ed1135c338d61907e436eaec6f087c1177c3d86", 0x97, 0x7}, {&(0x7f0000000240)="efd8e8d44fd659244a333fb7c05885ec42896fc865156074c03a693682afe77a79d683c207cf475ff84b902127bf2fc6526c2335753330ddaa6332310ad0aed00b26cbf6f2fd7c17180c89dd036726ae2be8b85553bfc1fe4d0ad8f85833aa7d605e204b15f11e29d4ba5c385823ddf62c15c8ef8eef98dc3a842685757090e8082a2f8facaf06d3ee8c749fccc6f40ca4e91cbf6b18dbae1bcb3ef1422225c961b72c41010628a64da9b0800b9c1b760ad04604090efa74d04fc1723c9bb0da44fcfa", 0xc3, 0x2}, {&(0x7f0000000340)="3a0985b7390ccb626220864f8406bc28efd7b8af1f85f3c3f6a14877862140f3e75f5b028308bc16cf9674a19903530d7fa50546321aa613b22cfb7c3f9a48e3946f92c1abea8728888f31fb2331942f5df9f9eba6885df4b93b85ab2bf1c39bc7e5cdfb0bc24922f61fd00964ccddfb817c8b4cfd2751d262e5928eba02d109d1133807f15d66e3d5eec3ff0bb214fc9efd39bbf9c6423e41c85fb9d37b5ed577476b595114ca2ce46fc87e808fff89188aaeeaf5500c36305ccb2c7293d939a6c1ff123532f4350b11476db3bbca4a8c018e5779db9a3b3cbad94f9dba4fb9c9b266de23ddb79e265a8544c013a243b5f9663fb0970d", 0xf7, 0xfffffffffffffff8}, {&(0x7f0000000440)="463f9a70e4581e7c485a2fca4e14457ce3abff8a06ef4f4fd46009144532b6ef8bca938be42485b1ddfd6fe77ae57cdc9f9c933eac5c8c2e44bf1426b94cd19e704ed84cc57c0ffe6841401b51325dc0d2e346d4c487b406dcd4a1fd8300c8d218fd8a2030d25b166ff9ce4c083314b420a64c94031ca6b5b75d5e4ea11dc1ff6a5d11facebaabed415a24fd0fcb41d10ef9cb466dcbe0354eb724c51c2356e553b35e56bfa83c4fb207a6dec02e94b5c70cfaf753d4cbea4eeeeb3f10de79da90aa3f49deb148bd306ba590fb0a1df70c6ab092ade34159bf2bfe0fc485cbc753288f69b506a4c352", 0xe9, 0x685b}], 0x4000, &(0x7f0000000640)={[{@user_xattr='user_xattr'}, {@replayonly='replayonly'}, {@notail='notail'}, {@resize_auto='resize=auto'}], [{@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r3}}]}) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 21:05:23 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x8000004000012, r0, 0x0) 21:05:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) sendto$inet(r2, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='team0\x00', 0x80, 0x10001}) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x222, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x44800) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x7, 0x9, 0x2}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/209) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) semget$private(0x0, 0x3, 0x204) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SIOCRSACCEPT(r5, 0x89e3) 21:05:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x489) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x9, 0x25f, @l2={'eth', 0x3a, 'hwsim0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 191.606128] audit: type=1400 audit(1564520723.927:50): avc: denied { map } for pid=8504 comm="syz-executor.0" path="/dev/cachefiles" dev="devtmpfs" ino=8 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 191.675321] ================================================================== [ 191.682981] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 191.689405] Read of size 8 at addr ffffffff8677bbb8 by task syz-executor.0/8509 [ 191.696855] [ 191.698494] CPU: 0 PID: 8509 Comm: syz-executor.0 Not tainted 4.14.134 #30 [ 191.705506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.714860] Call Trace: [ 191.717454] dump_stack+0x138/0x19c [ 191.721095] ? strscpy+0x20e/0x2c0 [ 191.724641] print_address_description.cold+0x5/0x1dc [ 191.729842] ? strscpy+0x20e/0x2c0 [ 191.733384] kasan_report.cold+0xa9/0x2af [ 191.737536] __asan_report_load8_noabort+0x14/0x20 [ 191.742912] strscpy+0x20e/0x2c0 [ 191.746284] prepare_error_buf+0x94/0x1aa0 [ 191.750516] ? save_trace+0x290/0x290 [ 191.754319] ? __lock_acquire+0x5f9/0x45e0 [ 191.758557] ? scnprintf_le_key+0x600/0x600 [ 191.762878] ? __lock_acquire+0x5f9/0x45e0 [ 191.767121] __reiserfs_warning+0x9f/0xb0 [ 191.771266] ? reiserfs_printk+0xd0/0xd0 [ 191.775334] ? trace_hardirqs_on+0x10/0x10 [ 191.779569] reiserfs_parse_options+0xa16/0x1820 [ 191.784336] ? reiserfs_sync_fs+0xe0/0xe0 [ 191.788491] ? trace_hardirqs_on+0x10/0x10 [ 191.792796] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 191.797826] ? lockdep_init_map+0x9/0x10 [ 191.801890] ? debug_mutex_init+0x2d/0x5a [ 191.806045] reiserfs_fill_super+0x461/0x2b20 [ 191.810550] ? finish_unfinished+0x1010/0x1010 [ 191.815138] ? snprintf+0xa5/0xd0 [ 191.818598] ? set_blocksize+0x270/0x300 [ 191.822667] ? ns_test_super+0x50/0x50 [ 191.826556] mount_bdev+0x2be/0x370 [ 191.830190] ? finish_unfinished+0x1010/0x1010 [ 191.834781] get_super_block+0x35/0x40 [ 191.838675] mount_fs+0x97/0x2a1 [ 191.842051] vfs_kern_mount.part.0+0x5e/0x3d0 [ 191.846553] do_mount+0x417/0x27d0 [ 191.850097] ? copy_mount_options+0x5c/0x2f0 [ 191.854509] ? rcu_read_lock_sched_held+0x110/0x130 [ 191.859535] ? copy_mount_string+0x40/0x40 [ 191.863788] ? copy_mount_options+0x1fe/0x2f0 [ 191.868292] SyS_mount+0xab/0x120 [ 191.871750] ? copy_mnt_ns+0x8c0/0x8c0 [ 191.875649] do_syscall_64+0x1e8/0x640 [ 191.879540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.884399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.889594] RIP: 0033:0x45c27a [ 191.892782] RSP: 002b:00007fc10a897a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 191.900495] RAX: ffffffffffffffda RBX: 00007fc10a897b40 RCX: 000000000045c27a [ 191.907773] RDX: 00007fc10a897ae0 RSI: 0000000020000140 RDI: 00007fc10a897b00 [ 191.916134] RBP: 0000000000000004 R08: 00007fc10a897b40 R09: 00007fc10a897ae0 [ 191.923417] R10: 0000000000004000 R11: 0000000000000206 R12: 0000000000000006 [ 191.930701] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff [ 191.937989] [ 191.939615] The buggy address belongs to the variable: [ 191.944899] __func__.31301+0x798/0x3a60 [ 191.948954] [ 191.950577] Memory state around the buggy address: [ 191.955602] ffffffff8677ba80: fa fa fa fa 00 02 fa fa fa fa fa fa 00 02 fa fa [ 191.962966] ffffffff8677bb00: fa fa fa fa 06 fa fa fa fa fa fa fa 07 fa fa fa 21:05:24 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x11, r0, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000040)={0x0, 0x0, 0x2080}) [ 191.970332] >ffffffff8677bb80: fa fa fa fa 00 00 00 02 fa fa fa fa 00 03 fa fa [ 191.977690] ^ [ 191.982883] ffffffff8677bc00: fa fa fa fa 00 00 03 fa fa fa fa fa 00 03 fa fa [ 191.990237] ffffffff8677bc80: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00 [ 191.990249] ================================================================== [ 191.990252] Disabling lock debugging due to kernel taint [ 191.991290] Kernel panic - not syncing: panic_on_warn set ... [ 191.991290] 21:05:24 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x62, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x6b5, 0x5, 0x40, 0x8000, 0x6}, &(0x7f0000000100)=0x14) 21:05:24 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x4000013, r0, 0x2) [ 191.997755] kobject: 'loop4' (ffff8880a4abe9e0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 192.005088] CPU: 0 PID: 8509 Comm: syz-executor.0 Tainted: G B 4.14.134 #30 [ 192.005092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.005095] Call Trace: [ 192.005110] dump_stack+0x138/0x19c [ 192.005121] ? strscpy+0x20e/0x2c0 [ 192.005131] panic+0x1f2/0x426 [ 192.005138] ? add_taint.cold+0x16/0x16 [ 192.005153] kasan_end_report+0x47/0x4f [ 192.005159] kasan_report.cold+0x130/0x2af [ 192.005169] __asan_report_load8_noabort+0x14/0x20 [ 192.005178] strscpy+0x20e/0x2c0 [ 192.005191] prepare_error_buf+0x94/0x1aa0 [ 192.005201] ? save_trace+0x290/0x290 [ 192.005211] ? __lock_acquire+0x5f9/0x45e0 [ 192.005218] ? scnprintf_le_key+0x600/0x600 [ 192.005226] ? __lock_acquire+0x5f9/0x45e0 [ 192.005234] __reiserfs_warning+0x9f/0xb0 [ 192.005242] ? reiserfs_printk+0xd0/0xd0 [ 192.005252] ? trace_hardirqs_on+0x10/0x10 [ 192.005262] reiserfs_parse_options+0xa16/0x1820 [ 192.005274] ? reiserfs_sync_fs+0xe0/0xe0 [ 192.005282] ? trace_hardirqs_on+0x10/0x10 21:05:24 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) [ 192.005325] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 192.005334] ? lockdep_init_map+0x9/0x10 [ 192.005342] ? debug_mutex_init+0x2d/0x5a [ 192.005352] reiserfs_fill_super+0x461/0x2b20 [ 192.053567] kobject: 'loop4' (ffff8880a4abe9e0): kobject_uevent_env [ 192.054900] ? finish_unfinished+0x1010/0x1010 [ 192.054915] ? snprintf+0xa5/0xd0 [ 192.058107] kobject: 'loop4' (ffff8880a4abe9e0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 192.062083] ? set_blocksize+0x270/0x300 [ 192.062094] ? ns_test_super+0x50/0x50 21:05:24 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) sched_getparam(r1, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xfb255371cc0d2dfa, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="fc7ec49101c68166b0ed0a6865a200223eb35a39a7e5c08e716b769a6b3f4f911f6cfe27319511bce58d5fc9264b6917a578d45e21b0121004c0bf402ac35de4f3b73e8f7e6b9a039cecfd15a4d116360b1a288d6ea3ad66552b474fc9", @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000035005b10,noextend,access=any,msize=0x0000000000000005,cache=mmap,cache=none,version=9p2000,smackfsdef=lo,\x00']) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syncfs(r2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r2, 0x0) [ 192.062105] mount_bdev+0x2be/0x370 [ 192.095090] kobject: 'input18' (ffff8880981cb3e0): kobject_cleanup, parent (null) [ 192.099309] ? finish_unfinished+0x1010/0x1010 [ 192.099321] get_super_block+0x35/0x40 [ 192.112655] kobject: 'input18' (ffff8880981cb3e0): calling ktype release [ 192.116489] mount_fs+0x97/0x2a1 [ 192.116505] vfs_kern_mount.part.0+0x5e/0x3d0 [ 192.121228] kobject: 'input18': free name [ 192.124865] do_mount+0x417/0x27d0 [ 192.124877] ? copy_mount_options+0x5c/0x2f0 [ 192.133558] kobject: 'loop4' (ffff8880a4abe9e0): kobject_uevent_env [ 192.133933] ? rcu_read_lock_sched_held+0x110/0x130 [ 192.138070] kobject: 'loop4' (ffff8880a4abe9e0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 192.142534] ? copy_mount_string+0x40/0x40 [ 192.142543] ? copy_mount_options+0x1fe/0x2f0 [ 192.142552] SyS_mount+0xab/0x120 [ 192.142558] ? copy_mnt_ns+0x8c0/0x8c0 [ 192.142570] do_syscall_64+0x1e8/0x640 [ 192.142580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.267163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.272332] RIP: 0033:0x45c27a [ 192.275515] RSP: 002b:00007fc10a897a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 192.283202] RAX: ffffffffffffffda RBX: 00007fc10a897b40 RCX: 000000000045c27a [ 192.290453] RDX: 00007fc10a897ae0 RSI: 0000000020000140 RDI: 00007fc10a897b00 [ 192.297704] RBP: 0000000000000004 R08: 00007fc10a897b40 R09: 00007fc10a897ae0 [ 192.304964] R10: 0000000000004000 R11: 0000000000000206 R12: 0000000000000006 [ 192.312228] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff [ 192.320889] Kernel Offset: disabled [ 192.324620] Rebooting in 86400 seconds..