ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000002900)={@hyper}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 04:36:25 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x80000000) 04:36:25 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x28201) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r2}) 04:36:25 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:25 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @phonet={0x23, 0x40, 0x1f, 0xaa}, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @can={0x1d, 0x0}, 0x401, 0x0, 0x0, 0x0, 0x71, &(0x7f0000000300)='bond_slave_1\x00', 0x4, 0x0, 0x6}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x40000000}, @xdp={0x2c, 0x0, r1, 0x25}, @sco, 0x0, 0x0, 0x0, 0x0, 0xcdfb, &(0x7f00000003c0)='wg0\x00', 0x7, 0x10000, 0x800}) r2 = syz_init_net_socket$nfc_raw(0x27, 0xcc506f65d831d26f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2a2041, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) 04:36:25 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) 04:36:25 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "b2970950847c417a1283278cc6c8c2a3045c393c415e61fcacdd5cfcf62c4552b3eea0b2aad51ab07d5f1fd54015d142a19546c772eb39f8a2f1873e350a8e1cbda902a923407ce6284a7a37ca29c41b5cea2c2edec430b20a4312948f8343c0490d1fd910e4b36df538fd23a74cef52d8ef7153d5b4a5529d9ae193cc5a88bb0be46d998bdb5297fce270ac87f84343f8607cec251caf549950be27f8e377701da84d3d1e37c2871ce3baaba3e5b1d18a37ce122f3ee329f3c6bb2e87a10addd2cb7c7c75d0cc9e85c4ecf9bfd5ae38a74e723ec10d63eb01179c8047bfa46ed7a1669f409644a9410f24728985d7cc5fa2b63815b8f324338db6d3e39740a035568174f89dc4bd7f2f8b79dad897ca68f446ed4c26021eb45f7acbef1895afbde82116244f78be2482365bdee9b82e35cb3184a149e4053af24fe25ffb5d4e3840093011e58e880e3528ff182ba0839df705b0767a9c6ab6086b4652f07097dd6252829c4a5905ec061dbc6d158424ca00b5e96cd3d5a0b78c20a553b5087b32536515c067aefd678813bd4346b4b07d13e6f79fb06523d5bb6ffca08c451254845b7b7065e512ab8440caf7d1ae3a4b3c32b8d2022b7cd7fc804d3b3fea9366b6ba1e3b3f39a9ea494418a051111e20978bf1ac3156c5dc14b734e40e0558126b59c1d1e57924a1b5c42e9861509f6facb4685497b323b1ebaab42937bcd211583375c12ba34a3bd59108175dd0fa8932b692d40858a148065af7e10b38579c85fba7dcd8060ccdf72ad7aed6d0295975efa75939f6d8aa5bcad066e1796772598a93d4a2acaaa19034b3d3704eb15da809bf9aa864da604d4751b0335c521ba6478a2cb7f5aeeedd94310f159374f3169f93e0fe4605e2480314e9b26837126bb260be86835300d76160bb25f8aa10781ad701f96051efeec649c7d263715980bc0a381c968d6d4ff3392665a7a2fc81b23a40a017f056bd19cf4d3b91f7476b16429d866f20b4d420279a2a91c283d80990d3e091d743cbdc1173290c1c028d3117ccfec853a74cc03e2c2851feb88f587fde813a13745fddbc120fd16e48bdead3a0161fd0076c964e9ada084709e06b63b4a4549610f60419a9213ba2c506ae2c62a0a6dd65340019cc8f43dfa60ec4bdb43fc308246a7871965345a7cac0152f3e9de237e7cece53563eadd9092891a04cc7c7e0375763184a14118408df1d025d5e66e309ecc7222948fec547629493b12fd6aa0e68a9834aa5c4515c152dc3e259bc6a8819a3e1fda1e19d0244ef54a9a38cbe464fb9c15c187331eb1aa92bbc90826f8618eedf74685600685f313284d5864c95d996452a96fc84044e034e849aa503f6747986e5d15f5cf7fd558216722726add47a73dda3a5c416e8eecaf781def9605789205827d98a2fe984d0c731219e0e174961ca723aa682140bc8e4c394e597b529d48dc0491dab7a76bdd5cc92f6cc87bad28d856e6ffdc4fea6a2ee4d3edf550fa56aba3f5b3a50f75b5db96583f11c69e527d2e7564affcf96a22e6364bee89811d3e6f2b5547f2969c7f2c194239283f78b1310bf323d9e52ccef1103b6c9607a761a0e9ab7bf71f10ab5ffafea63e3a82d62a09a4b4309716cb73ba3a2383f575a1ace1ec64bbd86fdd93267c652e90ac3770953f68dd8c4f7564d2d4e7b038d31aacad1daf4d943d4206ae2bcce699f13d1ba72a7b0e95eea7a84752a2a0ba65abe0af09ba4e2e44dca9f884cfa8862394e0972c7aa5d140999c627fe0e343598d54db63c30bfefc457d3cde726a050f3bb99320aebf3bdec5ebf8fee02516fc671143727344f4c69fcb3eaa2b185770f1fb79089c1bd134344ed46cbecae55fd1e48f2480754d18634c5900abc6683ce77d742e96b68c45a260c0dcfb25a960d79d0a0e6a37ead17dc42d8c39ba5aa20a5553a723e52c980e7c2c800bae01ed2945a1a9f9da152f7208522fabae20a9bb1bdd4a166ebd491b19364e3ea7db037714146a80f00beb02fc05f0e1aaad6aa9fc299dfdc7bfc24e0101a3594a640487151127c882e248bbe378584b2934ea2432fd2b0f7f737a13b0473ce83f093e8119602d43c449a8dc12492ded3ad554b1f0f6706c867c53e093527a1efdc86041aeb0cb7b7fe07b795570c77b7d0904e0b0738d1e55c7b8046c659e5d60515b849bb02913b1e789273ab556884477b06c3f618852b83d3e60f00aa5e1c376a496f7caf8dde43d3866b6b9a1b46608cf8a2e25eda36d24c53642d25e893ddbeaaa701062b6e3b2ff67cc41b2519132508481f52b5f26b6371abc1d98eed70336a69c300b5e8fc289612de8e4fbb8c6da3410358df9d434440445f6578095f4dc5da0cf82598c1488df73485814dcfa5831fc88c4678a5a3ec14947e47a62b7dbc9d541619084643eee57434acb98c3253593083501adbfa139dc1ee4ee42c0a69b1dee69121e801eca1eaeed7b22b1ef588abe145ddadb052c865c6ca1d2b086f1a3ed6b3c34f659e7170fc7a8bf9a0fd0d6ee2998f7bf55e04c3a6887a45023b18dce12daa29319cea2883274f7618e673bb63b27a9908f216e9d57f732ba23a10b491bd6810d09e85974ca5e77e70b952e1445aeaf24d6d4c9269a9507bf86146591f8f9a2696a42632154c88e4d07943da0cf11f2b288db50cb21d7688da961c7f4687043ed45f2495648a1364805222fa4dc172fc3f6c8359a97bfe10898ceb334b5f346fca7805d56a22de8c2ec49c1df5638d5d1c6f99050337dce3dd1f54c0af2fc425bc7f2eed581aec504c2311d7c7556bd2c62bb0ad75ef8cd85fc6ae74d020f16dd21a99c0bca831efc8bb26857f4c7df57ab27f06ced85563638f36ce54f1459c5de0122873e174f4d6a732b31db22fbf7345af8ba69121cb42124f20ea6bc7b307b4958a47581cc8e7456aeb8dd824e2ca6da05ef70717e25e2a7d76909ff71427c916a8c7a92dc976c14978ba5a252e4edad4ad393c816d838ba45e98fb59f2a9e3c459092179e1c904697e2b05ec16a6dc6b8018eb529d9d1a35456b481097bd9c380a743765f28f9d8d3505720bd824e460cff480c27eadefcfd2872b044582abd81d75efdb8a082c6e4a0e823181c32ea62bbefeff9c37d5c6a248639fbd539833b52a1d4b01eb253ea775a19b28976841087b458a20bbb5e7128db0519468d9093ffd307cfa7ca0c906536e6436ad177aff38c6087fb4a3c71fab180dc68371e704871ba8fbe68358c314cc97e9887274906f190cf2b073fc49cc25f872ae58bae438601e531f9b43d2700546c2c7a47683d92c8526319823517daec126ce6c578e36a93336d7e7d55ebb6e4ca767ef2fdc73e5d5353890ff202b7ea98accbf4bd127c435226b90f987f828764f50aea66be184667b1ce2e14aacd52e1db39105efa767616b8411d698f8e6e1198ad4850e8ae862072ca0511ef26d82db77aa7bac74dbff333700d1132d721e52b2cf3d41c6c56bd4ec4f868ed9a8a9c826ea61bb7746e2d0167bafd294688ec84a08a4e6d2a0a5259808a5852e7adf7088bcfea6938eaa0a72deaf34d3ffac9101eb33b3bbfb40058668d3156688dd2eafb3ede4211653364450c0bd82397529351d76eb3c63fe861a3a4307f3d9f25368b75fccaa5c6a5916c24bc49e38f7bf9e5f062fd3c4397d19ce0f13f3627219dd6165322c0b1b4de1581ea29dfaa43bd94e7225678c0c97c60eb52a50010aaa887917a2bde7d9abdd6b441cd25a3d1cd07c4bf26249907734bab0e4f2c0db7e03e539eec4fd4d4ec087cd6f23d1b8f98b53f0fcf6bf4ac09501876738effb09e3a17c4db7b7b1d9c876180b79179bd0b64c57b5e8f64982bedb5f690e8664c8357728476240a635d955cdb193c5bf4fa4916a79a7c9e480eb4cc01b1aa4ff4c648313191e379335c2253daaf739530454e88bf226560c58fa41b1375fd8442f3cd909a8a397864932f5b2e2989809a15d55deabe221b38a0c0af2092122f6c8c269d2a0088764eaab58e2b8a88e0289bcaac0da12357c260efdd4d874f0cd5f98a79f03604fbeb51ee3d562815798203157609ef8358ad0f1a978c9baabc027adc053fa411087f31a1ed2caf6e7ea931cfc0987bbcada8a1fd9b41141cbcdec758a608352819cb013778d21ea3982a3237a69121a49237fe6e4d94b1de4f78665e2e227a52af521a76b6043d5849762f8127ef0328dedea69c796448922a26890011d7f7a1e18b413b863579285d5b477dbe209cbc9bcc218bba07a87c2e372e1a98112e109346991c1e4b901fcbd8a20ea929d01813ebfd5144430187915caaed09500ce26894358cb55deaa7e2af6fe7a1bd06d0f6b7298b9838c8a41602f8bbe1155f2c5f1c905bcdd8771b0ea41d16650a541aeadfdf350de103388ff8a45ba505469bc40ef04be31a8d72182ce4acc5b5affa055451df1f83bea5e8647d31e3b82b44b6ccf20b166fa0230d4f54424ab905e4096a22d5d26c5a4e93b534a7bc9b4e42523f04d6b9e5249388a6b4b7cba33488cfeb67f228a80845d535f0588ac961d369705d705877645c220d1d5d8074ab3b2c1bb305d95b145df2e1fdb10b43cd70b38ca55ade4699ec73f72e4dbf380c80a964c6ec39d55176e03d99ab0c9a60718177c4ae52ac34b3fbb6ec6d2a577d22bc9c96a18281ca8fc05a02b9d374a55b35a0736ed20bd48b44acb1605857df617a8471fb73563650f465f6d26c17e10134445c8666b17514a9105c1f638b81fd745dc16c6d7f72b71fc4fc4e57f6eddd4e3702231fbd54a868c5373d1ac77aa75143a31b6f691801c51bfa75474fef185ea883acfd490d4f400e39db2ca1ea368d678da13ba881df8f9975e17c5b418c32a42fa1016ce54a773f7fe0b56dbe9614b32ee2144124316982313ea7f1a8207411c9954850bd81d7d84b66626a5cca80688ae50ce412105eacd9128d2495a3ba5dbda02288c982f724b1ce5976f06b29658a409be26346cb4b4fc455f460165bba9c4fbe5878e9911265304c2e4ef2b97fe61233148a843c62151a8f94ba1c84d7134cb5cfda1405efdb3a98d69d7429dc3cfcc31aadfea1cdbcd3485ff9c0fcbbb00820ec7e93ac4bd3b50308d47ccd65d0068e0f3d935bc72af42091ac25340d79efa80d9f3e9fb1d39578381f01b94b8846661134f60513a2408d17b9d34b96d068695a010aa124f39c224e10e5df88241bd5c5ed134238ca2ae08bce49532dc35b79a2b38073acbfdafbc0662c5c01e93d9204a575332b9b14e60bf982a5150f11fca1c34c5e5e3ef6e447fbbd74c5e0e9190706a5e6551a3f2e8dbf038772739154bd172f6fb2ff23db83189f0ddd33900c8cc75d383bdc6e59a7c952aa3e3c3425c085ebfd7ff30b678a7d3001b3acb4e7c69e4e2f916af009be01b87316f03e89a760bc8149bfa59f2acfd63847ececa7ca1ddd05f3a0e67e56575100df271b336d0721f5c01b7c1b44e0a325c3a7f9dd82635ec135e6d04f638a65f4921432b2c2c3295a4824454badb458c1dabefc71728d5f98a27bb70a1d9344a23caa5a424a9c79a2b6840aa86c892457bd9253beafab0560a8076fb4034f553a2c0e9add5aea9623ae482db662793297248a20caec59d3556ffb07d1d99db4535e24f8eaf6bd0e3a7a58a5ec60a35ad648306e8b14a3885848c37646d3604a55f862ee32264646a4202036e118c44c6b1523af49d68ca6b8d5a46b7f1d0f4b332d8e34fcf1d74e9cb81c81dc184dee15d910507559f1ff7e3ebeab0d0fbae141db48f515a5486"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000002900)={@hyper}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) 04:36:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x1ff}}, 0x10) 04:36:25 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0xfffffd16, 0x400000c3, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f00000000c0)=""/109, 0x6d}], 0x2}, 0x2000) connect$nfc_raw(r0, 0x0, 0x0) 04:36:25 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:25 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x100000ffffa, 0x12ba01) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x140, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000240)=0xffffffe0, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) 04:36:25 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x100048, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x100}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '/dev/vcs\x00'}}, {@nodevmap='nodevmap'}, {@uname={'uname', 0x3d, '/dev/vcs\x00'}}, {@aname={'aname'}}], [{@subj_type={'subj_type', 0x3d, '/&^\''}}, {@obj_type={'obj_type', 0x3d, '/@{'}}, {@obj_type={'obj_type', 0x3d, '/dev/vcs\x00'}}, {@subj_user={'subj_user', 0x3d, '\''}}, {@appraise='appraise'}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*}('}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syztnl2\x00'}}]}}) accept$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast1, @in6=@private0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 04:36:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:25 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="0cef1ce198db7ee3dfa3ba3c1f65f6e2a5b5a47ceaddb1d2d57b5d6d0cd61775d3f97e8b7964228c57ef4e90160e910aec9fd54276e9996c29fc70c6cc91da36caf8adc31560cbed0ef72edc659b5b867a916cadcb6c7212652d471ab464b64d0fc895d8a8539117e59d5d10b912fb040bd328c23109dd69b59e22fb5f4270522cc4d6651d3bb65731bbfad97266f1e7cc215dfe81dadcbcbe797af80b60524a4e048871b03bc003ba011573190cf4edb6dad217041e62b2acc600318b9acaf0373cd9ad124f0e1ad3a32493aa3acf743104f8dd520f57af8f2dabde5b020ce73abb3537174965e3ff87c95f3ca3a6a449e370b2c5753a17b33faf0f1a1ec47a79a62d3777b5e1d47d57cef9076eb4a7d5d5cd6894097e4db677c362b52cae9a7a7d3206d08b2adaab5678038495b061222c845332e5df1c783625c096c5a5fa62d9b6e3c6417b2d8a6302d7cd2268fe74da10fe09f880225632eed1e61a2a80f2640d3122ee5131b813747963fecceabd852d3cd14e64d5cdf68d2c3aca43ce351f57f1e954e5350b5fd2e7759c351b6ceed39f28083c2b863725c8eec4a51f940d16c7be0dc0fa8a97689f6e2e6cf1cf6a0489d3df0d580d732a31ab9ac6dc14685adbd9598dc5f9084e699f5e11a21d9c9d7251110feb6cce16a58a42523a42063824cda89dfd6269a1e39449b26ffc911f4553490e87c67d27f2364bebd95603e221002d59afdc9754ab80cda2bdf5b5e60d37a64031a37f14a6c8e01a556db5e21c3e5e6cb037d22ea41923c3e32b2ece97667cf578d0ad83542cc769eb0c5f1870116df85a3b2ee888776b3ca485e9df747e959d66ce638f2da16a2d75ee90bba9d988dc5fc5106f0e37dcfdd03596e0f80ed4c027ad1680804f7a739fe43c11a7a0f3dabbc41b86a33bccd5306e0b62ceda82c00e317b269f794fd2ff1319b1e800f4f54a23b5148b644a4b1fb100bbe13431202627d1b21c03257c7cba6442addc64f7f3f56b84e344a79fd2b03c2a8be4b6c342631b04aeac0fb03d66f402bbae076841a667a7880c7c291f5c9f05b9fea9645c77dd61ad44e79300738402d080134dc989dbf141fe2a38a2b4291ae74062df0676ddc9e0454abddaf9ce63f95c45c014d4c713bee197544b596592352b960efbdde3b08aa6260bfe9f6165e5e1cc60f5ff990dbff8d36cb3ce7d11dde54b84ab9aea3d02a63ce6b64bb220562a60691abd9c5d979b5611034bbcf950b358d592d78972243ae577774e689db18439ae6b7d261a0416ffdc96cb698f448d800f53f2eadb1c68e1c7380925ee291056af4b713353f3c1e14e46d92418bbe180164b7d1186faa68fca3d83bf32decf8562d8399c4b161acf103a02e7a013fb413ac4ea8397bfae8876d5f1072e13e0c9ebcfa23603794be12b1c2c3a942ac3ea33ef78cc30964db19cbe2c7267c4c7bfa3eef3df7cd0dbb1d8636a780ed5b08e6c5b3cb30d9cdcc5064c0a0e04f441cd27d80ec447683e56eddb769741b40a6b312ce2eb6d9d0034d19652918960ddc89370647ec644d35896078fbfa7b92fef542673268b430ae3acc3b6b19e120b3ffb6143ef96bdd049f9db6c32c058fc6a910c99d2432577b5ab7fb82dd838af1f080c64062d8c48fec9a3a51cff032e79b17f19007a47cc7febe9f5e4d9a1b185db4a81da735388a5854c21e9996dbeadbd7daf0160f45def573dd794cdf143bde0dc5ced1fbdd7a35fffd464b740b290ac0fefb91d9b918d6ff576138f4106d6fdffe07027d28b84b9e5e053d60995a0d81c4bc8d57dc91de03f36de23941eb93456a48c5894e099d14dbee8539bf5e7e5cbc0a6fb7ff6572d93c8ad26eb3aa88262c6c09751447b97b7893499e9ab04108bf41273f378ef9454cf7853efbb73acd8948a7379192a532d36574b880942240b4ec62b0a2c67590a8c918f27cc7cb8dd0164688a6d438660ecd199df74eb45713f0cd0db088e23f3aacf2b1c9dbd7f65d4ad9024bdcc0005e54b6203cebd1be6ef1591d4b253fc68040b01e1d08e6eb01826c0721a3832ba6607c2beec36307535bfdd1a8f6e5cd1ff423fc4cd28c87b1a0c98fc4b6ff3a2f9d1e58149184fb765ce115aa24f1bad6871153b7961fc293609be339a6e243b5e06571cc21629efe9bb8d90b353bcc20acf7ce65f44ec4a509ebc975e1764ba634e9904153505b2682a87fe23abd6540df1c7232058c01e680bbd164f0691307a68c1212c746d6ce55e7f45d9bb5089beb74779b397d3b2c1f88cbed5a30bc18e64a316d9ee6225a4c421c12bb6e880a09e1c1248ad3118eaca9707bb04cbc4829a6740b638d7f5900e014550748f906ff1c6daac9cc4533686740f32f66a9a8bec833688cfea6150414a91588e6352976fab40cb622e8065b55a642d495a8b27acc431d024b4e2d7a469ca56c7fbe96b051acdfde7987365cb7dae63894ac903bf9a3c2e5e34624d5d3110b2f7efabcfd10994a05225b4be935a5a586cf2c0ca687544b52ae0152ab0508bb38657191f38a709a19d61abca5d0f153539a0deaca43c3b941dc29b4cb1931a87b6543c4e313fdcc2f611619f87e85ea283ababb9c53179b3cd68afd885a64ea4befc08430aaac8f729734ddc0c310bc992a031dc95c1dd1a8bb31e7b977555dcb6e2429fb1f8c2cf0e4406b1fc58025afc03a768f33911fa2d78f1bee64a8d5fe9979371a886a1e8399b9eb6286045c0e72b19c409da71dfbd27b866a97aecfec74a3a13dedb3fa935a77eecc4bb64bbabbc9aaae2f8b482f06d7c4690c086cc8753e71db7d491ad8901b5463f2ed70ddc27e8bb04e48eb94359d78035a7863d877cf5982fdc38faadc4090fdd81eeddb3fdd5f632d4d751bb3814c94f670dad54d4f7cccb4946d224dbf93cea236ac3e640be21e1f69440d212966aa8779e84920aa020ec6809635c98dca7e5aede8a7a584d0d33b289f512ae772fb1e28badbd30131dcf01abdbb0f79eb997b841bdc8f95b0e9b276cde21195d096a9ce55f8655aa00597b212206d604bd372fd46d4170469038b60ef7d4c0ac3139fb7cad315111982f175a6abb4ce0fd7bfd9994f01912fc32cab21656a680fc356d3a011170ead10c828d08b370e9b1f2684f8f0a88d99eb6f5b42d0c5a4b420d86e61aa42b5c38c7f54061b3085846dd987c8a984bd68284f88aca857e92c447847e4c9d6c97d981df912b7d968f5ef444d97ca72107e11c666507e40f154b5a6fda7d40069444a272a03a803b9dca23b4955708e0fca390fd196a8606b29da6b57932bfcfacc33baff47bd8467762e856da27cf5b0e60ba29976898bfe539d9f560d67926281f16c853db1bc66c0a8a0b3af7a07efa7b9313b6d6bcc6214e0a226bc814e21993b5a5c9093fcde3ba187fd21eff64024f3c940f3ee4a122b65052b68ac27dbf78d01578050936603419979dff58dd0ad7caa9cb28d26b2565a4caa25890f95d1da6fbc2dc8aa3838d2e4137cda1424d7f92ea9d19bcd1eb8027474505724c278a9778c4c372120c489b10e0e31e4b945072d9ef6ddaa4c73f916bf765222bbd7f0826e0c4652435ba258d456677b631a0b4f3be4e5236fd39d8e143a0c7e134e6bd5b0f9aae63fbd906bf2a863adbb1763d57f491a7fc822e8baa801caaeffdb47721aba36c3c4cf2cc7ec3565aa78bb1a8ca6937d5b0c6ad096e9361a4c5f43e3cf223452ca1cfc3bbc8d314d34e1d5af4ee1a0e143090bb7298b88fcc984ac6c4d9e5dbb1b5020c7275e65208d304fb8949e59b1cd6378b31b60464299f84eeb746f76cd6c14907652fdc31e2108af32b590b8ab380651117a4455b306cfad9d875857b1f7024bc1ee5876a52eb07f84413d9e3f6e8aced2913a0bd234c42a6fab30ca4efc18f23affbb58776b9dc5f40a66f99841f44454318be113430e4c467cd43abbabba2433c2bffe87f3527f049bb3c376ae5216b285f8e57d762873e2342fb71be3be7efa227714d29a080ebdb72891bf5faa6095feddaceb29714786c7db9a899004360c607351868807282ac02ec3022ff0194774bca60c3f1800c9039f5e6ce640fbbf2e3ea3b83aca710a4a1f9085441ec29329645141a6793bfcd94289a4ab1fab46f08efc070c83bdbc4de436be16352a9c2eca7a521b49640ab7ec5bee2943820e20cded4c037ff3e174eae8f2cbcfa22fdc60555570b2fa1bb7e352651208bf01d519ce6d92be78dec8f4b414141bf2edf8aad9c4d6c7ebc9d0d1d18b0daa3c46dfc31a022259b7f3a0af1f1461178df75668577043532ad75b8ab79d0e4545ddde11817ee3e07ae6e33f51516df21460dde838fe1dc52ceeb0b98c6daed724fac5f2c2f9a24e11929c05bb843aabc0e37e72de399502a1763a035fb2e0242411a40d1f81a47e787515ceb934d613fd4cbbe6d574425ff7aa88dc6515457ba2621bcb14217f59135ff4f87481dcb9de79c3584b11db792646cb43ca86b501bf3e85d1c80efcbded116c126d096cde0865ef02499b06d7db3fd6f82b0a82e551e278642014cad653e0a14b59a6ea942428e766e829ab5763c313a93da31fb7fb6ead0dad9a474652390d58d4956e1dcfd89d5e1687e24f2ac66d26afdf6444e31a3c5dcb66f5267080683a93aeee866d57b71615b3fa61353c53277c8b28f19dd0e529768878f285d0680435ff935f66b02233c4883e918e023f3ae15863a9c3f2c9549d67be8d496e1c4ef8eaf87da9c624d1d4f7cddcbdccc35654a79d2cd6b0aec6fa39d76b06bbdd33ab91b7248865ad8520529fe0b4f549407a64eefa47c00caa6ec8d6c154836e4c4313775c2e286af1488a49f33b477fbc1468404bb400f0d82ad529da26dd6f5d031a2115a7be1c32cce1703434a4ed069c0d1d92da68e93098c1a22ef29b6e99fa4afa9c2cc69f2e706f2cdbaf67700fa84fe7d64342578b2f12e41c61add2a42e81c1e24b24c30e5f541383432b8b96fd8fa51954c0678965131b9ffb68aaa3e4c6149ee101e4a6afe6b06921286cb418bcf270848e15a4621933fe52aa173c2a384adb117a314a8ee74b631e4dc3ba6947f852613bd9e0916746b7705706f34f05645697bcada319742faa572a4ffdd9f68524c479993ed3f75185c05e7be27ac5cf1b243d2906373d9cf232524684c0a9e6fd0256872ef414430ac79824aaa1d866f35b15b835a88c8df3a0054ceab9e1faac56f42b2dfaead86b85d75d2b304f04013f3283df11cfe7db5060d0cf1fe33e55374bbb2bb4616fe8a95a63a63b62110aef865fbeb4eb1199d98b77d3af4fb69cfe3891b34fefb8302b945ff4917509c650169a92acfa9c0a632ce19d2ae3838110d1069b0d4c01f0a4bf4de8a06a5dbd7f33c2a1247bfae6dfc250c5ae67ab7681697604cb7abd1459d273c66b034116996bf4fdde0d7097b1665354ef49e04649ce77eed4d63dadac1b96a84fc765b83afe99e06873a6617ded7db6d2b35a5770d41a790a1e9aa02abf54d39cc88ce27c7b9faef2de6886b22385e86d93b76cec09569f9eb03012d2aa668c8464094dbd349a5bb732a5d11d06c315f305822af6147a55ad6709d761cc4435d5a25fa4727bc60025c8b78638592db1d2cd7bdac1ee097e08f92aee873d947c60d717c6bad4d0eb8e545214edf2aaee0b2a6c58daec30be778bac762d37c7bae726abe4c55939ea4d99d2f3879b50645cd1c0cdc750fec577c6d4c2e7c289f4b74bf93b3f2d03c38c7d8046a591b5e9e5be0d282658746b72c69afd823e6c5b10a8f3d84d2087e663e8466c7", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "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"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:25 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "b2970950847c417a1283278cc6c8c2a3045c393c415e61fcacdd5cfcf62c4552b3eea0b2aad51ab07d5f1fd54015d142a19546c772eb39f8a2f1873e350a8e1cbda902a923407ce6284a7a37ca29c41b5cea2c2edec430b20a4312948f8343c0490d1fd910e4b36df538fd23a74cef52d8ef7153d5b4a5529d9ae193cc5a88bb0be46d998bdb5297fce270ac87f84343f8607cec251caf549950be27f8e377701da84d3d1e37c2871ce3baaba3e5b1d18a37ce122f3ee329f3c6bb2e87a10addd2cb7c7c75d0cc9e85c4ecf9bfd5ae38a74e723ec10d63eb01179c8047bfa46ed7a1669f409644a9410f24728985d7cc5fa2b63815b8f324338db6d3e39740a035568174f89dc4bd7f2f8b79dad897ca68f446ed4c26021eb45f7acbef1895afbde82116244f78be2482365bdee9b82e35cb3184a149e4053af24fe25ffb5d4e3840093011e58e880e3528ff182ba0839df705b0767a9c6ab6086b4652f07097dd6252829c4a5905ec061dbc6d158424ca00b5e96cd3d5a0b78c20a553b5087b32536515c067aefd678813bd4346b4b07d13e6f79fb06523d5bb6ffca08c451254845b7b7065e512ab8440caf7d1ae3a4b3c32b8d2022b7cd7fc804d3b3fea9366b6ba1e3b3f39a9ea494418a051111e20978bf1ac3156c5dc14b734e40e0558126b59c1d1e57924a1b5c42e9861509f6facb4685497b323b1ebaab42937bcd211583375c12ba34a3bd59108175dd0fa8932b692d40858a148065af7e10b38579c85fba7dcd8060ccdf72ad7aed6d0295975efa75939f6d8aa5bcad066e1796772598a93d4a2acaaa19034b3d3704eb15da809bf9aa864da604d4751b0335c521ba6478a2cb7f5aeeedd94310f159374f3169f93e0fe4605e2480314e9b26837126bb260be86835300d76160bb25f8aa10781ad701f96051efeec649c7d263715980bc0a381c968d6d4ff3392665a7a2fc81b23a40a017f056bd19cf4d3b91f7476b16429d866f20b4d420279a2a91c283d80990d3e091d743cbdc1173290c1c028d3117ccfec853a74cc03e2c2851feb88f587fde813a13745fddbc120fd16e48bdead3a0161fd0076c964e9ada084709e06b63b4a4549610f60419a9213ba2c506ae2c62a0a6dd65340019cc8f43dfa60ec4bdb43fc308246a7871965345a7cac0152f3e9de237e7cece53563eadd9092891a04cc7c7e0375763184a14118408df1d025d5e66e309ecc7222948fec547629493b12fd6aa0e68a9834aa5c4515c152dc3e259bc6a8819a3e1fda1e19d0244ef54a9a38cbe464fb9c15c187331eb1aa92bbc90826f8618eedf74685600685f313284d5864c95d996452a96fc84044e034e849aa503f6747986e5d15f5cf7fd558216722726add47a73dda3a5c416e8eecaf781def9605789205827d98a2fe984d0c731219e0e174961ca723aa682140bc8e4c394e597b529d48dc0491dab7a76bdd5cc92f6cc87bad28d856e6ffdc4fea6a2ee4d3edf550fa56aba3f5b3a50f75b5db96583f11c69e527d2e7564affcf96a22e6364bee89811d3e6f2b5547f2969c7f2c194239283f78b1310bf323d9e52ccef1103b6c9607a761a0e9ab7bf71f10ab5ffafea63e3a82d62a09a4b4309716cb73ba3a2383f575a1ace1ec64bbd86fdd93267c652e90ac3770953f68dd8c4f7564d2d4e7b038d31aacad1daf4d943d4206ae2bcce699f13d1ba72a7b0e95eea7a84752a2a0ba65abe0af09ba4e2e44dca9f884cfa8862394e0972c7aa5d140999c627fe0e343598d54db63c30bfefc457d3cde726a050f3bb99320aebf3bdec5ebf8fee02516fc671143727344f4c69fcb3eaa2b185770f1fb79089c1bd134344ed46cbecae55fd1e48f2480754d18634c5900abc6683ce77d742e96b68c45a260c0dcfb25a960d79d0a0e6a37ead17dc42d8c39ba5aa20a5553a723e52c980e7c2c800bae01ed2945a1a9f9da152f7208522fabae20a9bb1bdd4a166ebd491b19364e3ea7db037714146a80f00beb02fc05f0e1aaad6aa9fc299dfdc7bfc24e0101a3594a640487151127c882e248bbe378584b2934ea2432fd2b0f7f737a13b0473ce83f093e8119602d43c449a8dc12492ded3ad554b1f0f6706c867c53e093527a1efdc86041aeb0cb7b7fe07b795570c77b7d0904e0b0738d1e55c7b8046c659e5d60515b849bb02913b1e789273ab556884477b06c3f618852b83d3e60f00aa5e1c376a496f7caf8dde43d3866b6b9a1b46608cf8a2e25eda36d24c53642d25e893ddbeaaa701062b6e3b2ff67cc41b2519132508481f52b5f26b6371abc1d98eed70336a69c300b5e8fc289612de8e4fbb8c6da3410358df9d434440445f6578095f4dc5da0cf82598c1488df73485814dcfa5831fc88c4678a5a3ec14947e47a62b7dbc9d541619084643eee57434acb98c3253593083501adbfa139dc1ee4ee42c0a69b1dee69121e801eca1eaeed7b22b1ef588abe145ddadb052c865c6ca1d2b086f1a3ed6b3c34f659e7170fc7a8bf9a0fd0d6ee2998f7bf55e04c3a6887a45023b18dce12daa29319cea2883274f7618e673bb63b27a9908f216e9d57f732ba23a10b491bd6810d09e85974ca5e77e70b952e1445aeaf24d6d4c9269a9507bf86146591f8f9a2696a42632154c88e4d07943da0cf11f2b288db50cb21d7688da961c7f4687043ed45f2495648a1364805222fa4dc172fc3f6c8359a97bfe10898ceb334b5f346fca7805d56a22de8c2ec49c1df5638d5d1c6f99050337dce3dd1f54c0af2fc425bc7f2eed581aec504c2311d7c7556bd2c62bb0ad75ef8cd85fc6ae74d020f16dd21a99c0bca831efc8bb26857f4c7df57ab27f06ced85563638f36ce54f1459c5de0122873e174f4d6a732b31db22fbf7345af8ba69121cb42124f20ea6bc7b307b4958a47581cc8e7456aeb8dd824e2ca6da05ef70717e25e2a7d76909ff71427c916a8c7a92dc976c14978ba5a252e4edad4ad393c816d838ba45e98fb59f2a9e3c459092179e1c904697e2b05ec16a6dc6b8018eb529d9d1a35456b481097bd9c380a743765f28f9d8d3505720bd824e460cff480c27eadefcfd2872b044582abd81d75efdb8a082c6e4a0e823181c32ea62bbefeff9c37d5c6a248639fbd539833b52a1d4b01eb253ea775a19b28976841087b458a20bbb5e7128db0519468d9093ffd307cfa7ca0c906536e6436ad177aff38c6087fb4a3c71fab180dc68371e704871ba8fbe68358c314cc97e9887274906f190cf2b073fc49cc25f872ae58bae438601e531f9b43d2700546c2c7a47683d92c8526319823517daec126ce6c578e36a93336d7e7d55ebb6e4ca767ef2fdc73e5d5353890ff202b7ea98accbf4bd127c435226b90f987f828764f50aea66be184667b1ce2e14aacd52e1db39105efa767616b8411d698f8e6e1198ad4850e8ae862072ca0511ef26d82db77aa7bac74dbff333700d1132d721e52b2cf3d41c6c56bd4ec4f868ed9a8a9c826ea61bb7746e2d0167bafd294688ec84a08a4e6d2a0a5259808a5852e7adf7088bcfea6938eaa0a72deaf34d3ffac9101eb33b3bbfb40058668d3156688dd2eafb3ede4211653364450c0bd82397529351d76eb3c63fe861a3a4307f3d9f25368b75fccaa5c6a5916c24bc49e38f7bf9e5f062fd3c4397d19ce0f13f3627219dd6165322c0b1b4de1581ea29dfaa43bd94e7225678c0c97c60eb52a50010aaa887917a2bde7d9abdd6b441cd25a3d1cd07c4bf26249907734bab0e4f2c0db7e03e539eec4fd4d4ec087cd6f23d1b8f98b53f0fcf6bf4ac09501876738effb09e3a17c4db7b7b1d9c876180b79179bd0b64c57b5e8f64982bedb5f690e8664c8357728476240a635d955cdb193c5bf4fa4916a79a7c9e480eb4cc01b1aa4ff4c648313191e379335c2253daaf739530454e88bf226560c58fa41b1375fd8442f3cd909a8a397864932f5b2e2989809a15d55deabe221b38a0c0af2092122f6c8c269d2a0088764eaab58e2b8a88e0289bcaac0da12357c260efdd4d874f0cd5f98a79f03604fbeb51ee3d562815798203157609ef8358ad0f1a978c9baabc027adc053fa411087f31a1ed2caf6e7ea931cfc0987bbcada8a1fd9b41141cbcdec758a608352819cb013778d21ea3982a3237a69121a49237fe6e4d94b1de4f78665e2e227a52af521a76b6043d5849762f8127ef0328dedea69c796448922a26890011d7f7a1e18b413b863579285d5b477dbe209cbc9bcc218bba07a87c2e372e1a98112e109346991c1e4b901fcbd8a20ea929d01813ebfd5144430187915caaed09500ce26894358cb55deaa7e2af6fe7a1bd06d0f6b7298b9838c8a41602f8bbe1155f2c5f1c905bcdd8771b0ea41d16650a541aeadfdf350de103388ff8a45ba505469bc40ef04be31a8d72182ce4acc5b5affa055451df1f83bea5e8647d31e3b82b44b6ccf20b166fa0230d4f54424ab905e4096a22d5d26c5a4e93b534a7bc9b4e42523f04d6b9e5249388a6b4b7cba33488cfeb67f228a80845d535f0588ac961d369705d705877645c220d1d5d8074ab3b2c1bb305d95b145df2e1fdb10b43cd70b38ca55ade4699ec73f72e4dbf380c80a964c6ec39d55176e03d99ab0c9a60718177c4ae52ac34b3fbb6ec6d2a577d22bc9c96a18281ca8fc05a02b9d374a55b35a0736ed20bd48b44acb1605857df617a8471fb73563650f465f6d26c17e10134445c8666b17514a9105c1f638b81fd745dc16c6d7f72b71fc4fc4e57f6eddd4e3702231fbd54a868c5373d1ac77aa75143a31b6f691801c51bfa75474fef185ea883acfd490d4f400e39db2ca1ea368d678da13ba881df8f9975e17c5b418c32a42fa1016ce54a773f7fe0b56dbe9614b32ee2144124316982313ea7f1a8207411c9954850bd81d7d84b66626a5cca80688ae50ce412105eacd9128d2495a3ba5dbda02288c982f724b1ce5976f06b29658a409be26346cb4b4fc455f460165bba9c4fbe5878e9911265304c2e4ef2b97fe61233148a843c62151a8f94ba1c84d7134cb5cfda1405efdb3a98d69d7429dc3cfcc31aadfea1cdbcd3485ff9c0fcbbb00820ec7e93ac4bd3b50308d47ccd65d0068e0f3d935bc72af42091ac25340d79efa80d9f3e9fb1d39578381f01b94b8846661134f60513a2408d17b9d34b96d068695a010aa124f39c224e10e5df88241bd5c5ed134238ca2ae08bce49532dc35b79a2b38073acbfdafbc0662c5c01e93d9204a575332b9b14e60bf982a5150f11fca1c34c5e5e3ef6e447fbbd74c5e0e9190706a5e6551a3f2e8dbf038772739154bd172f6fb2ff23db83189f0ddd33900c8cc75d383bdc6e59a7c952aa3e3c3425c085ebfd7ff30b678a7d3001b3acb4e7c69e4e2f916af009be01b87316f03e89a760bc8149bfa59f2acfd63847ececa7ca1ddd05f3a0e67e56575100df271b336d0721f5c01b7c1b44e0a325c3a7f9dd82635ec135e6d04f638a65f4921432b2c2c3295a4824454badb458c1dabefc71728d5f98a27bb70a1d9344a23caa5a424a9c79a2b6840aa86c892457bd9253beafab0560a8076fb4034f553a2c0e9add5aea9623ae482db662793297248a20caec59d3556ffb07d1d99db4535e24f8eaf6bd0e3a7a58a5ec60a35ad648306e8b14a3885848c37646d3604a55f862ee32264646a4202036e118c44c6b1523af49d68ca6b8d5a46b7f1d0f4b332d8e34fcf1d74e9cb81c81dc184dee15d910507559f1ff7e3ebeab0d0fbae141db48f515a5486"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:25 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000002740)=""/4096, 0x1000, 0x40004001, &(0x7f0000003740)={0xa, 0x4e24, 0x1, @local, 0x3f}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:25 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/41, 0x29}], 0x7, &(0x7f0000000480)=""/6, 0x6}, 0x62) r1 = socket(0x0, 0x3, 0x8) connect$nfc_raw(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x20200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x3f, 0x3, 0x74, @dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80, 0x7800, 0x1, 0xffffffff}}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000780)={0x101, 0x38d, 0x1, 0x3, [], [], [], 0x5, 0x80, 0x1, 0x8000, "a476648b4bc7e886591eea191bc60fe0"}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={0x0, @rc={0x1f, @none, 0xff}, @can={0x1d, r3}, @generic={0x1e, "6b7e4e383dd61fd7ae870021926a"}, 0x8, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000600)='vlan0\x00', 0x1, 0x9, 0x8}) 04:36:26 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 04:36:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "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"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:26 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x1780) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@empty, @remote, @private1, 0x5, 0xd9ba, 0xe, 0x100, 0x9, 0x4000004}) 04:36:26 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x115180) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x100a0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:26 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "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"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:26 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:26 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) socket(0x23, 0x5, 0x9) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) socket(0x23, 0x5, 0x9) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:26 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x6}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:26 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 04:36:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) socket(0x23, 0x5, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:26 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0}, 0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000200)=0x80000000) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x28000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:26 executing program 2: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:26 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xa8, 0x7, 0x8, "718d569076cba2ed44e06a5fadc3f9f5651fe0074bf754613a34c6997f77cd2268bd339a57a8b44531f33dc3180f2a8ce17e945d97f9b5818a64b0491c904acd623e4c7a990141c66e1de455da99ba91644b5b02cff161e21ae6d5e1dd0967bb140005060bfeb403a26f093086b1fc5f67ee7e8dc3b36ed4e71945d517eff4625b2c2aa6beaffb8844b2ffc08d8ccad56b85fc43c9071d40cd385da96a1eb4c193cf7a85da205218"}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0, r1}) r2 = socket$inet6(0xa, 0x80000, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x80, 0xffffffff, 0x0, @local, @local, 0x1, 0x8000, 0x5, 0x2}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', r3, 0x4, 0x4, 0xf7, 0x0, 0x5, @local, @mcast2, 0x80, 0x7, 0x6, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000500)={@private1, @private0={0xfc, 0x0, [], 0x1}, @mcast1, 0xff, 0x101, 0x97d9, 0x100, 0x2, 0xe5b1d5bb1d57864d, r3}) 04:36:27 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:27 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0xff, 0x8, [0x49a, 0xfffffffb]}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x80c5) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:27 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:27 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x420122, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x1, 0x8, 0xbdd2, 0x1809, 0xffffffffffffffff, 0xff, [], 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x40) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:27 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680)="73ac0711355e1258505c5147fc1fd2a54ff2ef86b2085fa2333279910925cd10d63b48913970c8be86b6f20baa6ec2510beeb856e7f5daa2904cb7dc925dc52fbd88edee2ae005bc45372dd009037e8d01dd6c17388a3b8f0d0d118afdc40c1941a383268014b8eb5fbc741d7d89dc9a242407c55609a8d96733139458482df97b3e304e50715d4f2276d7a0095db1ffdaaabbb1cf6264a55b548593b7d26ee34d6d3ec1c0bb8a5265f1bca776af4efcccf664f7d2003b6d6e1e2072b931dad53c657bdc0a899665378beb5cbd34ebf9182e45ebc600e865f504d035501dcfa359fe4559d62f3b1d0c52", 0xea) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e20, 0x756a, @private1, 0xfff}, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, [0x1, 0x10000, 0xeaaf, 0x1ff, 0x0, 0x1, 0x800, 0x8]}, 0x5c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x5a3f) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6c6f6f73652c6361636865bd6decaed25e91b4006d61702c706f7369ffff00002c6163636573733d616e792c7365636c6162656c2c", @ANYRESDEC=0xee01, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c7063723d30303030303030303030303030302b30303034372c00c8f34c759b481218484cb4f2769ff2c7d659642210e8d4dde8597f14c66297d6f7c301d238abe39cc1c91caf790e4255975c9e5f865701b142db1592809781cd6b5b4d6ada11bf913f7f36ce25e19a515e44702155fe8055fdf1833f2da84e82483f3c0a74e3a08c1fbbdb90ea195a5652a7bc46c93573b2ca3165f305f67665071cc062e8d7b41a97aaf919623304663a5bd26316701fc9ad24f0a480b001476e7890d87c881014e9a997fe60171e"]) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x2, 0x2, 0x0, 0x7, 0x8, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd7, &(0x7f0000000280)=""/215, 0x40f00, 0x4, [], 0x0, 0x0, r5, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x1000, 0x101}, 0x10}, 0x78) 04:36:27 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x80000000}, 0x10, 0x102c1}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:27 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:27 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 04:36:27 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000000)=""/98, &(0x7f0000000080)=""/173, &(0x7f0000000140)=""/100, 0x4}) 04:36:27 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) socket$inet(0x2, 0x0, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:27 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:27 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) connect$nfc_raw(r0, 0x0, 0x0) 04:36:28 executing program 4: select(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) 04:36:28 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x462045, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)={0x0, 0xc, [0x0, 0x3, 0xb5]}) connect$nfc_raw(r0, 0x0, 0x0) 04:36:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x400002, 0x1}, 0x10) 04:36:28 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f0000000300)=@raw=[@generic={0x7f, 0x1, 0x1, 0x3, 0xfff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, &(0x7f0000000380), 0x40e00, 0x0, [], 0x0, 0x1c, r2, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xd, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@generic={0xd1, 0x6, 0x9, 0x4, 0x2}, @map={0x18, 0x2, 0x1, 0x0, r2}, @generic={0x6, 0x6, 0x5, 0x42, 0x8}], &(0x7f0000000040)='GPL\x00', 0x7, 0xc6, &(0x7f00000001c0)=""/198, 0x41000, 0x9, [], 0x0, 0x25, r3, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x3, 0x8}, 0x10, 0x0, r4}, 0x78) 04:36:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x8, 0x1c, [0x7, 0xffffffff, 0x8, 0xffffffff, 0x7, 0x5, 0x5]}) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:28 executing program 0: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0xa000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x2, &(0x7f0000000580)=@raw=[@alu={0x7, 0x0, 0x9, 0xa, 0x1, 0x50, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000005c0)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x8, 0x3f, 0xe44}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000700)={r0, r2}) 04:36:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 4: select(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, 0x0) 04:36:28 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8f66c6627612c29f91c1d6d1bf751acf8f9c8f53ab31ff55c144915feaf6ba9e32320158cfaaedd986fbf5b0ca46711bcceda17157f06fd8ffefdf601ffa11caf4451c03ccb41b79b4b8555f0372ecd3a0bf596688d6a8733dc384e3f53e135ce148998ad61c9531a37e91f2a6e9619c00b27470b8f6eed1e066f417ad21fd158cc9be060b8898d38af7c0b19798004ed8d08bdba891240a4a687cab6cdd4bffcda4f7c1f8acb8ae71645b39228574cccb04670159affbd28e68f252435b9041561ba7dd92e10", 0xc7}, {&(0x7f00000002c0)="7309e06c6d0082200414dddce2d5cbf4e17d92a64d94b56aee27f00b61369c78a9185496e545bf7151143fb5bdc4133b51c7ce5f90789eb28ba4ce0a9a96efc5fdac9e69704362636b26b787aa43be5f8e3f572fee758bf17416f288f3566fb7e4f1bbd8f1000be36a4b4b25655f45b15dbb3e309f6aba3222c7838171e9572577cbdc392c1267609d97bfe6660627efb1fa15daafeb9c1279456ea90178f2429a556cefbb2b470a17d121cf3191e3ef9ccd2ac0e35dcfbb604426d34ba26a34b2e273de2b6cef6348da41fd84d4b0bb7c44805315502b60441f41e9d400947fcea504dd2c7da5eab14c9780b1fa2547aea6d14b2c62fa00ea806098a7c9", 0xfe}, {&(0x7f00000003c0)="208291d9bac4e8e370f2fe5c8191e9e4406662491e56509b8896d2746464dffb8878dd0249184979b994b945803f2ef8dabce32a129a9a0891f63b20490f08d3d72426d0afcdb979e402aa91a1dc74a72fcaeaf2c4698d0a8fcfa2c2e43484715708ee", 0x63}, {&(0x7f0000000440)="2e07fe6f250ad297a4ac1ce61380092228e6061ce74e298c3996c67411778ec76923552d853c82185950d5933c000409d3c7c5f9eb105f22445ccdf16787a7e46507b4f98d9e5e8d3b589805d8989e4f6820a4ccd0adc900a24aa87192d29f2ba9d376c42dd1dba0672bb3e215fadab0412385a683b51f2036116c7bae20505c21f7acacac7107ddcccd0ef8e512fa922f835eae60d3cc310e66d9156765ed6d2147f50fce86c5cfcb9cddf2a26332875fc844287b8c95300df4fdb9e76737ac5e0e5612a913190aebaab2554d", 0xcd}, {&(0x7f0000000040)="68c6994360442d9785e28a031330f7c2e10a1e2bf5f9492f9e2df80cde2be610883652", 0x23}, {&(0x7f0000000140)="2ba0507d889b37eb75e56da2e86bb1788ed9150204fe5582ff60bc55f80ad15ca74b41bc00b2cb583f7b733d", 0x2c}, {&(0x7f0000000540)="ac6165de006426058a1641520ef160c81c2b471506ee3f037f636874fa7f4ca42fcebfb084b4fce0dc1399587bfa3cede40e15712d1471f6d9a382b9b36cc93130f37a5e5d89d811fc8dd24e7156f735172800173307ec0f28623b4ed9e36b0d89dc0fd13026472b9abd63d6666656ae25634a77223afdb3115a05a900a52edff1b7bbcddc909af9c535a9ce666ec95b70f0f982ae10bb1d0f5295d03a0a41ac503d50ac527450cf389398f07e5040e7a9a898d890ae9082cb43ead5b55d19f55a6974452bb3d62f762af7ad616ab7d3bf55a493beb089e699", 0xd9}, {&(0x7f0000000640)="f829516f94be148490e4ebe55641c680f639bbe016dc6dd59d7be2019e9b48da76eab250519bd5431b79e4ddddf3da84043361dd23bb6938b5258af6b458cfba37119cf16af99fef45d0d832c8e8f07303ca210f88645331088ca246d7aa42a157ea2047bf7cb3c18d1328f100fbcc68c0cf53175abd2c1024d29b4f9fc4f6f6a39edc33b72f8250edc743ed1331360313d2cf7c6dac216c9f228eced37e226b8a60f3f50cb29fa2102712965260c2254dcc76dba8f25906754d236d99f1de7c442a9c9a36105724369025b6f8bf94b955e18ef7cc70736119cd23712094b48f9d2bfcb1ee877566e68994a27d5d726d3363bded", 0xf4}], 0x8, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x4004) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000c0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 04:36:28 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x6}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:28 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:28 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=@srh={0x2f, 0x2, 0x4, 0x1, 0x6, 0x10, 0x0, [@private1={0xfc, 0x1, [], 0x1}]}, 0x18) 04:36:28 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:28 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:28 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:28 executing program 0: prctl$PR_SVE_GET_VL(0x33, 0xe44c) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x2) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x40) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x2}, 0x10) socket(0x25, 0x4, 0x8e4e) 04:36:28 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 04:36:28 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:36:28 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:28 executing program 5: prctl$PR_SVE_GET_VL(0x33, 0xe44c) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x2) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x40) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x2}, 0x10) socket(0x25, 0x4, 0x8e4e) 04:36:28 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:28 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8f66c6627612c29f91c1d6d1bf751acf8f9c8f53ab31ff55c144915feaf6ba9e32320158cfaaedd986fbf5b0ca46711bcceda17157f06fd8ffefdf601ffa11caf4451c03ccb41b79b4b8555f0372ecd3a0bf596688d6a8733dc384e3f53e135ce148998ad61c9531a37e91f2a6e9619c00b27470b8f6eed1e066f417ad21fd158cc9be060b8898d38af7c0b19798004ed8d08bdba891240a4a687cab6cdd4bffcda4f7c1f8acb8ae71645b39228574cccb04670159affbd28e68f252435b9041561ba7dd92e10", 0xc7}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="208291d9bac4e8e370f2fe5c8191e9e4406662491e56509b8896d2746464dffb8878dd0249184979b994b945803f2ef8dabce32a129a9a0891f63b20490f08d3d72426d0afcdb979e402aa91a1dc74a72fcaeaf2c4698d0a8fcfa2c2e43484715708ee", 0x63}, {&(0x7f0000000440)="2e07fe6f250ad297a4ac1ce61380092228e6061ce74e298c3996c67411778ec76923552d853c82185950d5933c000409d3c7c5f9eb105f22445ccdf16787a7e46507b4f98d9e5e8d3b589805d8989e4f6820a4ccd0adc900a24aa87192d29f2ba9d376c42dd1dba0672bb3e215fadab0412385a683b51f2036116c7bae20505c21f7acacac7107ddcccd0ef8e512fa922f835eae60d3cc310e66d9156765ed6d2147f50fce86c5cfcb9cddf2a26332875fc844287b8c95300df4fdb9e76737ac5e0e5612a913190aebaab2554d", 0xcd}, {&(0x7f0000000040)="68c6994360442d9785e28a031330f7c2e10a1e2bf5f9492f9e2df80cde2be610883652", 0x23}, {&(0x7f0000000140)="2ba0507d889b37eb75e56da2e86bb1788ed9150204fe5582ff60bc55f80ad15ca74b41bc00b2cb583f7b733d", 0x2c}, {&(0x7f0000000540)="ac6165de006426058a1641520ef160c81c2b471506ee3f037f636874fa7f4ca42fcebfb084b4fce0dc1399587bfa3cede40e15712d1471f6d9a382b9b36cc93130f37a5e5d89d811fc8dd24e7156f735172800173307ec0f28623b4ed9e36b0d89dc0fd13026472b9abd63d6666656ae25634a77223afdb3115a05a900a52edff1b7bbcddc909af9c535a9ce666ec95b70f0f982ae10bb1d0f5295d03a0a41ac503d50ac527450cf389398f07e5040e7a9a898d890ae9082cb43ead5b55d19f55a6974452bb3d62f762af7ad616ab7d3bf55a493beb089e699", 0xd9}, {&(0x7f0000000640)="f829516f94be148490e4ebe55641c680f639bbe016dc6dd59d7be2019e9b48da76eab250519bd5431b79e4ddddf3da84043361dd23bb6938b5258af6b458cfba37119cf16af99fef45d0d832c8e8f07303ca210f88645331088ca246d7aa42a157ea2047bf7cb3c18d1328f100fbcc68c0cf53175abd2c1024d29b4f9fc4f6f6a39edc33b72f8250edc743ed1331360313d2cf7c6dac216c9f228eced37e226b8a60f3f50cb29fa2102712965260c2254dcc76dba8f25906754d236d99f1de7c442a9c9a36105724369025b6f8bf94b955e18ef7cc70736119cd23712094b48f9d2bfcb1ee877566e68994a27d5d726d3363bded", 0xf4}], 0x8, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x4004) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000c0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 04:36:28 executing program 2: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x2, 0x81}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:28 executing program 0: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2d, 0x9, 0xff, 0xfffffffa, 0x0, @loopback, @dev={0xfe, 0x80, [], 0x1a}, 0x80, 0x80, 0x1, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xb751de221f9e2412, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xc09}], &(0x7f00000000c0)='syzkaller\x00', 0x3f, 0xf1, &(0x7f0000000100)=""/177, 0x41100, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xb, 0x7f, 0x3}, 0x10}, 0x78) 04:36:28 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 04:36:29 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x80000002}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xde, 0x8432, 0x10, @loopback, @remote, 0x2afc0e96d1bad10, 0x700, 0xfff, 0x7f}}) 04:36:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 04:36:29 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8f66c6627612c29f91c1d6d1bf751acf8f9c8f53ab31ff55c144915feaf6ba9e32320158cfaaedd986fbf5b0ca46711bcceda17157f06fd8ffefdf601ffa11caf4451c03ccb41b79b4b8555f0372ecd3a0bf596688d6a8733dc384e3f53e135ce148998ad61c9531a37e91f2a6e9619c00b27470b8f6eed1e066f417ad21fd158cc9be060b8898d38af7c0b19798004ed8d08bdba891240a4a687cab6cdd4bffcda4f7c1f8acb8ae71645b39228574cccb04670159affbd28e68f252435b9041561ba7dd92e10", 0xc7}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="208291d9bac4e8e370f2fe5c8191e9e4406662491e56509b8896d2746464dffb8878dd0249184979b994b945803f2ef8dabce32a129a9a0891f63b20490f08d3d72426d0afcdb979e402aa91a1dc74a72fcaeaf2c4698d0a8fcfa2c2e43484715708ee", 0x63}, {&(0x7f0000000440)="2e07fe6f250ad297a4ac1ce61380092228e6061ce74e298c3996c67411778ec76923552d853c82185950d5933c000409d3c7c5f9eb105f22445ccdf16787a7e46507b4f98d9e5e8d3b589805d8989e4f6820a4ccd0adc900a24aa87192d29f2ba9d376c42dd1dba0672bb3e215fadab0412385a683b51f2036116c7bae20505c21f7acacac7107ddcccd0ef8e512fa922f835eae60d3cc310e66d9156765ed6d2147f50fce86c5cfcb9cddf2a26332875fc844287b8c95300df4fdb9e76737ac5e0e5612a913190aebaab2554d", 0xcd}, {&(0x7f0000000040)="68c6994360442d9785e28a031330f7c2e10a1e2bf5f9492f9e2df80cde2be610883652", 0x23}, {&(0x7f0000000140)="2ba0507d889b37eb75e56da2e86bb1788ed9150204fe5582ff60bc55f80ad15ca74b41bc00b2cb583f7b733d", 0x2c}, {&(0x7f0000000540)="ac6165de006426058a1641520ef160c81c2b471506ee3f037f636874fa7f4ca42fcebfb084b4fce0dc1399587bfa3cede40e15712d1471f6d9a382b9b36cc93130f37a5e5d89d811fc8dd24e7156f735172800173307ec0f28623b4ed9e36b0d89dc0fd13026472b9abd63d6666656ae25634a77223afdb3115a05a900a52edff1b7bbcddc909af9c535a9ce666ec95b70f0f982ae10bb1d0f5295d03a0a41ac503d50ac527450cf389398f07e5040e7a9a898d890ae9082cb43ead5b55d19f55a6974452bb3d62f762af7ad616ab7d3bf55a493beb089e699", 0xd9}, {&(0x7f0000000640)="f829516f94be148490e4ebe55641c680f639bbe016dc6dd59d7be2019e9b48da76eab250519bd5431b79e4ddddf3da84043361dd23bb6938b5258af6b458cfba37119cf16af99fef45d0d832c8e8f07303ca210f88645331088ca246d7aa42a157ea2047bf7cb3c18d1328f100fbcc68c0cf53175abd2c1024d29b4f9fc4f6f6a39edc33b72f8250edc743ed1331360313d2cf7c6dac216c9f228eced37e226b8a60f3f50cb29fa2102712965260c2254dcc76dba8f25906754d236d99f1de7c442a9c9a36105724369025b6f8bf94b955e18ef7cc70736119cd23712094b48f9d2bfcb1ee877566e68994a27d5d726d3363bded", 0xf4}], 0x8, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x4004) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000c0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 04:36:29 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8f66c6627612c29f91c1d6d1bf751acf8f9c8f53ab31ff55c144915feaf6ba9e32320158cfaaedd986fbf5b0ca46711bcceda17157f06fd8ffefdf601ffa11caf4451c03ccb41b79b4b8555f0372ecd3a0bf596688d6a8733dc384e3f53e135ce148998ad61c9531a37e91f2a6e9619c00b27470b8f6eed1e066f417ad21fd158cc9be060b8898d38af7c0b19798004ed8d08bdba891240a4a687cab6cdd4bffcda4f7c1f8acb8ae71645b39228574cccb04670159affbd28e68f252435b9041561ba7dd92e10", 0xc7}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="208291d9bac4e8e370f2fe5c8191e9e4406662491e56509b8896d2746464dffb8878dd0249184979b994b945803f2ef8dabce32a129a9a0891f63b20490f08d3d72426d0afcdb979e402aa91a1dc74a72fcaeaf2c4698d0a8fcfa2c2e43484715708ee", 0x63}, {&(0x7f0000000440)="2e07fe6f250ad297a4ac1ce61380092228e6061ce74e298c3996c67411778ec76923552d853c82185950d5933c000409d3c7c5f9eb105f22445ccdf16787a7e46507b4f98d9e5e8d3b589805d8989e4f6820a4ccd0adc900a24aa87192d29f2ba9d376c42dd1dba0672bb3e215fadab0412385a683b51f2036116c7bae20505c21f7acacac7107ddcccd0ef8e512fa922f835eae60d3cc310e66d9156765ed6d2147f50fce86c5cfcb9cddf2a26332875fc844287b8c95300df4fdb9e76737ac5e0e5612a913190aebaab2554d", 0xcd}, {&(0x7f0000000040)="68c6994360442d9785e28a031330f7c2e10a1e2bf5f9492f9e2df80cde2be610883652", 0x23}, {&(0x7f0000000140)="2ba0507d889b37eb75e56da2e86bb1788ed9150204fe5582ff60bc55f80ad15ca74b41bc00b2cb583f7b733d", 0x2c}, {&(0x7f0000000540)="ac6165de006426058a1641520ef160c81c2b471506ee3f037f636874fa7f4ca42fcebfb084b4fce0dc1399587bfa3cede40e15712d1471f6d9a382b9b36cc93130f37a5e5d89d811fc8dd24e7156f735172800173307ec0f28623b4ed9e36b0d89dc0fd13026472b9abd63d6666656ae25634a77223afdb3115a05a900a52edff1b7bbcddc909af9c535a9ce666ec95b70f0f982ae10bb1d0f5295d03a0a41ac503d50ac527450cf389398f07e5040e7a9a898d890ae9082cb43ead5b55d19f55a6974452bb3d62f762af7ad616ab7d3bf55a493beb089e699", 0xd9}, {&(0x7f0000000640)="f829516f94be148490e4ebe55641c680f639bbe016dc6dd59d7be2019e9b48da76eab250519bd5431b79e4ddddf3da84043361dd23bb6938b5258af6b458cfba37119cf16af99fef45d0d832c8e8f07303ca210f88645331088ca246d7aa42a157ea2047bf7cb3c18d1328f100fbcc68c0cf53175abd2c1024d29b4f9fc4f6f6a39edc33b72f8250edc743ed1331360313d2cf7c6dac216c9f228eced37e226b8a60f3f50cb29fa2102712965260c2254dcc76dba8f25906754d236d99f1de7c442a9c9a36105724369025b6f8bf94b955e18ef7cc70736119cd23712094b48f9d2bfcb1ee877566e68994a27d5d726d3363bded", 0xf4}], 0x8, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x4004) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000c0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 04:36:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000080)={0xa, 0x4e21, 0xca81, @rand_addr=' \x01\x00', 0x9c}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="b518e4888f7744fa91272f7cf7e70f632e55be5dfc19be36603f60b3b37bb54501e96ce78cd8aa45b84950cd1a4d1d15ff1d89c7ce47b34bcdaf71209f1aefba513e19ee2f6b386ed155e30b648ff0697fbf7987422c35882eafd390975250f09ab2c1bd1fa8f058a5df7f11cf3760347bc2468b91df0f44196a86c6b92816d6a18ddf198e09a6fbec2883fa27a384eeeb4c224d14", 0x95}, {&(0x7f0000000180)="c6", 0x1}, {&(0x7f00000001c0)="27a06f4ee5585e66c234a6fd8f29b1f38b9e46f4423f30563e9856c2cc1a498fc3f80b708c8a8ab42eb1dcc2cd6c7d770ef35c20506bfd0f502f5d301a839c752feaa94c7a4359c95b88a86c2dae6e9423ed314344976b37574d924b231b2572", 0x60}, {&(0x7f0000000240)="81b25fd387db27521e91a58e3690771707060bf70bd11d48da9b16cdc5b1cd540f1baeb182d29d057a80900d63d133aee2968c35ce926619d21f50c92180df6f43f8aaf876", 0x45}], 0x4, &(0x7f0000000300)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x16, 0x5, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @pad1, @pad1, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x78}, 0x8000) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x16, 0x5, 0x1, 0x9, 0x18, r1, 0x1, [], 0x0, r1, 0x4, 0x1, 0x3}, 0x40) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1, r2}, 0xc) 04:36:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x26}, [@alu={0x7, 0x1, 0x1, 0x6, 0x6, 0x1, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf3}, @exit, @generic={0x6a, 0x0, 0x1, 0x18, 0x400000}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @exit, @ldst={0x2, 0x2, 0x0, 0xb, 0x7, 0xc, 0x8}]}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x35, &(0x7f0000000640)=""/53, 0x41100, 0x4, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xa, 0xd, 0x3b}, 0x10}, 0x78) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f00000001c0)="b460f1ad9c6d6e18b9c6d515ee23fd043ea3929e457d8177b722133e9e36b46ade3eb7e41012e41b1b20305bf864b83a36ab855a73705f1e51d5b7a1eca8a8fd4a64005a60dbe94d368a8cbfb9fe2a5e7a1da954d02c9b56fe6d762d11a0054f3b57282f933fa4bf937a32503ec9ce4b9fb115dbc1737c3177930b9c5204a962cf77d5c55d4a17165aa92ad31e47831b73831b87e1d8efbc94280c7b18b2ef4fafb1cd1edb6cf562bef6cb8f28d679431acb0f5a040be75197beff21c626f6112164e87bfc62e1af2fd33aade14598146a50b03619014da9fe9bccd584db321138dfbea2826e0e46713e3cd8bcecf2cd14f9182a03ef8b13e6", &(0x7f0000000480)=""/232, &(0x7f00000003c0)="790a3474c3e8fe925072b529642b3462252342c6ea2478832bcdc7d41485ae2f67e26e0511a47ec8cd3ba6c9096755d802d14aad1d1c073abf9dec1c2d60b5d9b1f6542272109397d873108f3841bebd752f197065db9fae3eb2e26dce3282bb481533f959e774ace49afbdcd7bd74b86bd732b48813f85fdf95d8628382c3de8bdde6fdd9e1269b2c71bc14debad97e97104b8c6c21e829a0726992ce3141bd09616902", &(0x7f00000002c0)="91fc0ced619173fca988dba7d81fac32c8a1d4d1d1c4f021dee40b0d76441b518a72d984ff3bd75c7464487f0b82e7f53326f200c76f0d1a238d4a3478ff9f818ca00f7e1e250000000eb700e022c0eb8319b61bdd445991a08e689250be7763e5606326fb992ba24f40fce935cbc6eadc41f60a25255d3d5a8fbbdb5f1dee874ea45b12743b2e868b6f6be5cf9158b9520d655fbd83a540ce0e1250d49bd23d752d2582cef4cfa4", 0x1, r0, 0x4}, 0x38) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x0, 0xd, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r4, 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x20400, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) 04:36:29 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x8) 04:36:29 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "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"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x1) connect$nfc_raw(r0, &(0x7f0000000500)={0x27, 0x0, 0x0, 0x3}, 0x10) 04:36:29 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x80000002}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xde, 0x8432, 0x10, @loopback, @remote, 0x2afc0e96d1bad10, 0x700, 0xfff, 0x7f}}) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) recvfrom$inet6(r3, 0x0, 0x1f, 0x40010061, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x8) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:29 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000000c0)={0x2}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000000)=[0xffffffff, 0xb61e, 0x4, 0xfffffffc, 0x9, 0x6, 0xfffffff8, 0x0, 0x8000, 0xffffff57], &(0x7f0000000100)=[0x5, 0x2617, 0x7, 0x2], 0x10, 0x4, 0x10000, &(0x7f0000000140)=[0x4, 0x1, 0x0, 0xffff5118], &(0x7f0000000180)=[0x401, 0x4, 0x7fffffff]}) 04:36:29 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x26}, [@alu={0x7, 0x1, 0x1, 0x6, 0x6, 0x1, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf3}, @exit, @generic={0x6a, 0x0, 0x1, 0x18, 0x400000}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0xfffffffffffffff0}, @exit, @ldst={0x2, 0x2, 0x0, 0xb, 0x7, 0xc, 0x8}]}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x35, &(0x7f0000000640)=""/53, 0x41100, 0x4, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xa, 0xd, 0x3b}, 0x10}, 0x78) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f00000001c0)="b460f1ad9c6d6e18b9c6d515ee23fd043ea3929e457d8177b722133e9e36b46ade3eb7e41012e41b1b20305bf864b83a36ab855a73705f1e51d5b7a1eca8a8fd4a64005a60dbe94d368a8cbfb9fe2a5e7a1da954d02c9b56fe6d762d11a0054f3b57282f933fa4bf937a32503ec9ce4b9fb115dbc1737c3177930b9c5204a962cf77d5c55d4a17165aa92ad31e47831b73831b87e1d8efbc94280c7b18b2ef4fafb1cd1edb6cf562bef6cb8f28d679431acb0f5a040be75197beff21c626f6112164e87bfc62e1af2fd33aade14598146a50b03619014da9fe9bccd584db321138dfbea2826e0e46713e3cd8bcecf2cd14f9182a03ef8b13e6", &(0x7f0000000480)=""/232, &(0x7f00000003c0)="790a3474c3e8fe925072b529642b3462252342c6ea2478832bcdc7d41485ae2f67e26e0511a47ec8cd3ba6c9096755d802d14aad1d1c073abf9dec1c2d60b5d9b1f6542272109397d873108f3841bebd752f197065db9fae3eb2e26dce3282bb481533f959e774ace49afbdcd7bd74b86bd732b48813f85fdf95d8628382c3de8bdde6fdd9e1269b2c71bc14debad97e97104b8c6c21e829a0726992ce3141bd09616902", &(0x7f00000002c0)="91fc0ced619173fca988dba7d81fac32c8a1d4d1d1c4f021dee40b0d76441b518a72d984ff3bd75c7464487f0b82e7f53326f200c76f0d1a238d4a3478ff9f818ca00f7e1e250000000eb700e022c0eb8319b61bdd445991a08e689250be7763e5606326fb992ba24f40fce935cbc6eadc41f60a25255d3d5a8fbbdb5f1dee874ea45b12743b2e868b6f6be5cf9158b9520d655fbd83a540ce0e1250d49bd23d752d2582cef4cfa4", 0x1, r0, 0x4}, 0x38) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x0, 0xd, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r4, 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x20400, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r3) 04:36:29 executing program 0: r0 = socket(0x6a, 0x2, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20400, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x9, 0x141001) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000100)={0x4, 0x1, 0x7fff, 0x1f, 'syz1\x00', 0x2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x1, 0x3, 0x4, 0xfffffffffffffffe}, @map={0x18, 0x0, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x41}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa2, &(0x7f0000000200)=""/162, 0x41000, 0xa, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0x5, 0x18000000}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r4, r5}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0]) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0x5) 04:36:29 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000002680)={0x1, 0x400}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002880)={0x1, 0x1, &(0x7f0000002700)=""/75, &(0x7f0000002780)=""/144, &(0x7f0000002840)=""/53, 0x100000}) sendmsg$kcm(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="c3ea00752f056ace15523f2ead41f469bf8ce51ecdd8ee2476220b9e841b0001612ed2980ab9281c3880bae826b17f08c2556f62465b88696dd276d72d656199a3febfdd52fa7281f697176bcdd5342cef558ea5b3d97437b5edb063145664101c32c521e27da029d60f4832b2baffb14d68e475c5e415fc71b384f87b3b40df002e8a4fcf01bcd8cfd8aba0c6df0c4ed5ca6231e91bb7e1b76d973591b4506560ab694df5022ddb2843d43baa3cecebbd3a127b1fb5b262b7d477fe8a8606be9bce5beaa1d92c2a", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c0652e99458e0f71410b229d235941a71e6b12c3b6b0cccc732e85970d937a29427f", 0x22}, {&(0x7f0000001140)="892880f038413a1ca2891527ce7423b69558aba5fba87cbd897737d808f390170822001c826dccb20d95fb010a86ed8d72d43d586da234e509654cfc47cb66a8987152bb2fdea2628140a121b676c29e793c793c9cd0160f1a1ba2e3c5ad7142e0bbaa9f7874e87e4a43b9877a1e89017eae440bb95eb6d40ddb2651647d42a1d4203d4ffc16f29bd02ad5cb6621db77e8321d94af58f4c7b7a2281ace1c2f2d8f08734c515f56", 0xa7}, {&(0x7f0000001200)="680b350d30ff05b2010855f922523c891a9d7f5a13086fa58c834ec5639a11937e15c06c8ecbe7607294694607478fa020b9ad745f210ded3d7c62c2871f0cbce73a1001939aaf383a41ebcc", 0x4c}, {&(0x7f0000001280)="73145557a323d0c71a7ca1334e8fe20171042fe75a2500e4b33ac7b0e6ae3742afe4fca285dc3a4df6a46351cced1ae4c5dde70d1a5c27d658ffe1f38be9e21743e4ef9f0fea8975f0c28abb477cf59f73ea4973a34e16923778daf695f5803a5cadcc565beecfe020cc1a2646d3c20568556e6b94d439fcdaaad88600e00ab7a8ca93c2f0ed4a97e7a72f0ebb8ce07a75a46d91f95815eb79dbb07a5a27c207018a052489d03dbe8d8cf4044dcf118cfbff8340c86356eaef0bcfd8cac2db1f896a95e3f3b94fdf9c93909b04e2952c834f280ffbc6c1567d5d72c96f1442c4bf7430bb85f93d8ef348ea4e30a9dac40a4e", 0xf2}, {&(0x7f0000001380)="c1b5b4ac91171a91fa01d51302b4571cde08a99b90b7ae37fb45f891bf8815ea5716a10452447a38b9e9fd60105f0fbadc8b872a6b67315fbfd11d0760ee8bdf0aae43cb5de2e7b794aab806864215a75feb37489a0b0390af4324bf614f0162c69b564163f11052540f70", 0x6b}], 0x7, &(0x7f0000001480)=[{0x1010, 0x84, 0x0, "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"}, {0x20, 0x115, 0x2, "dfbfd22abb7cf596a6c3cda24ce7a3"}, {0x90, 0x110, 0x8, "20a6d7ec180b68b2fc30d96a3c26d359461608b5b3c6db2036642567c04713676330e9e6633e5daa457473d470f9b7f52b3ea05ca493fd52764bc5b96834f73dd149d9781cd20ef297d74e0494e476f99cc5aa22d75e017b5c3403d334741445d0a6888801cbb0a329caa0aee365d5e9268cf5297bd400104322e5a2"}, {0xc0, 0x110, 0xfc000000, "a1ffcb221dcbae5cd9633eef1b6a099b88c1f54ad5bd4f5b457b93fd28a1448a41f49987f6e4b00b2af52176a2e709d420d67004368b0903bd5395b4d1c6b104992670a6a27cd029dc5aae2f314fb1cf23896404dad2592f2f8cd3fa732c461fc1c4b3ebb30ba365b195a0004949f50aa39cb1782488e37cfe2b3dc476775f49c4cce8540ce161ba226c17bbef2cf45838382a1425040fbebedbb6ce01a76fb2cd0949b95ec367fe10046d94ae6193df"}, {0x38, 0x104, 0x10001, "11cc1cf3eda289c86f05a4b7af4f8829c57fa6cda7c023f0e52dba5114b55534998019345a39c048"}], 0x11b8}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000002900)={@hyper}) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x3, 0x4, 0x3, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x6, 0x8, 0x5, 0x400, 0x7ff}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0xad9, 0xffffff5f}, 0x10}, 0x78) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000002c0)) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080), &(0x7f0000000280)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x28201) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r2}) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x7fffffff, 0x4) 04:36:29 executing program 5: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0]) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0x5) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4}, 0x10) 04:36:29 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_handle_stats\x00'}, 0x10) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x28201) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r2}) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:29 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x7fff) socket$inet(0x2, 0x6, 0x81) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000200)=ANY=[@ANYRES64=r0]) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) recvfrom$inet6(r3, 0x0, 0x1f, 0x40010061, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x8) 04:36:29 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2082, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/156) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x28201) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r2}) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0xa1, 0x3, 0x9, 0x19, @remote, @private0={0xfc, 0x0, [], 0x1}, 0x40, 0x700, 0x7fff, 0xfff}}) 04:36:29 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:29 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4a3, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/sg#\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:29 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:29 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xb1, 0x2a2002) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) recvfrom$inet6(r3, 0x0, 0x1f, 0x40010061, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x8) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101200, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access'}}, {@nodevmap='nodevmap'}, {@nodevmap='nodevmap'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}, {@fowner_gt={'fowner>', r5}}, {@smackfsfloor={'smackfsfloor'}}, {@subj_user={'subj_user', 0x3d, '/dev/vcs\x00'}}, {@appraise_type='appraise_type=imasig'}]}}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000640)=0xfff, 0x4) 04:36:30 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc0081, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:30 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4a3, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/sg#\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) recvfrom$inet6(r3, 0x0, 0x1f, 0x40010061, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x8) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x28201) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r2}) 04:36:30 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000001040)={0x0, 0x8, 0x6, 0x80000000, '\x00', 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000040)="1ab265f0d876508077976a0fe7757fae7532a7d9236558661b6da7139d7ceae518e57b98eb0ab0290e6748c8d6012e2d594de036406e2c55e4576e4df3bfbab3fe7e6c39c23f30336fee6cabc060478b59924983f704144f74c89aec37248293add3478fb777234a088c25c566fb6d2fa346e08b61c9d5efd78feacaa845a9780618b68330fe0f225b12775e356a8b2dfa9f982807e94d543e6ab6c8ccbc3bd2291296f64c44a4438b1fee45f66dd41d966a756ef12c305cd642701d34cd68034859dcd8ffe1100a90ea3a6fbd36e045a813dd6f18de734be0865a379c6344357d9b11a028bdbb0cb10ab8ab652d7a63c318ac250c654bd3c0ca061c7ff6ac5812a2384516ccec741e79b3c0a17bd68a5fc5cb52ff8fb033bae61ffdbbb985ae139ea7035a77704af84a40aed399996ac62489ae187b76f915f1b491e3bf1a6baceea5b14beb4bbd279e28c2e158a88a502dd2b199043ecd89783ef72e3babf6f167cec9f1dea3e5cb486c7f25703f691ebd064283de3faf8f6b8ddb971a3d8c0d2cbd8be17a6569981f4ed43f9598b6bfd5e1a9933ce381178a4a15dbe760a9d42678af70756ad242c72b66e6cf2c02794ce46577f1108e3e0b6a7f5cd36b6e93f3db4b1554bf26ac40cabd7229a9ae1f82adb3e51b3e45091c2d47bf9081570037bf8629e91020a3a60b8562a8bef52f8f43ebf9efda6d0687f09891fa7f046edb366f90cec529ae4ba40f2cd13f7a3dee96523c916a63add5b439c3fa691f059c1545b07a12716d6c5c5edd9d82757cdc6c28a3b9285dfcc0b5857bcb8ce0f6e5075d03a1d376ba11583d35795c94950ed023e66938e83e5d0de678bd67c23db51dab27e985b564f488256daeea20289840f22f4a44be52725c0afb1056584e9a55f24c33074e17d73364dcc54796daee62fef90ed04ac0066c4293f94897342c0fa3e8c36f527083350a752373ba3c1ea970b385c4de9bdcb3638a6962dad6c0dc9cdd9a3b191b64d1d17ac9020fb4747f3c14eb4397b5970a72031ba2b0c6d605deb2f43e9958817a63b24abe7bf79860c76f773d4f8a5a6fd7429d7be707c58690309d33658cf5cce7066518156fe34a289bc02a9b6c1e69d8dd94d487d41ac696344d9cfb4ee7457170a4401232e30b2d2324c6f2f8c7a3f8c121d200118e7d95e55ec6d967b56c1ab2f62e50f8a30b13c24f759440c02dd733e1d16e36ce53e6efd2dd5661f11daf624f48c78808081d3bd71c3f9c83f143dff35cfebfd09c9a6aa0943d09932130a4957b1c7dd8486d6dc32c1d3fcb691624f731f3857fa0adea45cbf7e8e9c94d9a3c8499c507dea8a82691f9cbaf7b6446211a64210be89b4e576a9027085cd9d3cad28197dc02607a1c4acb84a93f68ebb856103b71ff60b67a55dbb6036b49089bd26286a87f991a95765524a296564b13f493a16f47d03cda4a7f16b6c055a76fa0f434eb2afd81402c7171f77429bb71d3ab094a2f607c5be6d6db37dcdc028643f40982cdacb17293a5177b2e0402f1fb4049f169351734446a98044c05a07f16028f55797684bfcccc60584efd1532fa9d2c2f129be2877823e0e5d059a8735c0e5dcd2090785a368a2c152ae1a9cb6f4e639d4eb8974d4989abf8e2cee16168d9db2cf93f5492fd91fdbe189cfb3175710284354c0f4039e72e97099e90808bc70255a38616222d0a55f5d0420b02ffc14ee3b205912ddcf6ed53d5e813314143fd62fd17e59315bd03841258ea2a23201bedce4e93826a61a3b80d1c2e334e30ff9d6ff96e86c415e22345ff435033068e954c685c8ae7e7d95aad0b79bfcd30b24be0fb5601b9e55cca194bbf094976b511870798bd5a47d542c9eff3bd8088208886444cc0f29c6de5aadff7a43709ca0f607fa0f00ceb2692dfe14fc16cf2d8a9b8d9ac5483cfc407dc8fa31b671ec715e5aa13b72558c22d3f54622d486a817757ae5b0c22e54249beadee7dfa3129246355dd1455847171879b86e9dda1316ecb72dd5e3f42504ff1a4efb462796758c1df9e1a6c654669d9cb932a816e150d98f79b84d57aa85c6f3d7f61efc295563c9359f3798efb73a5329254c987ca5700eeddae6d787adf97b4dc702f011399fc68b77ad01e5124b4b7ee6547a0f9635b3c11c09faa2d0ccf32135f27d4b09f4a593e3a7eadffac71df3cc7e9f80e6c3df48fee83b39755bff42d9323ef3b9ae62e52c092e0edb8a3ed15918be153b7710224e388def015abb4a749cebbf91fe93dbea19ba99fd92eb27bca06bdb24aa87b141745318dbce82af444550e62207af4b3f6d49986845d83fe43109b09f21366eb3f2996503757fac536d951b4b0d7d40942e3fd1c1e25c034317104b3f6d015c870b96d00a076898c812927929ba4e2a622c8d8469d54922306b6f1cee1ce469f6ae7cdbd9467eefe8dc8ae9d28a97a7e13a8b55f78b617b0dc704d90b6e6b4ed8f7ea5a326554efd01a32c251810983b273719715cad781644490a2d0cd950fbb50bcedd6ac1b0e864d749252eb06a7d4ba8ce4236ab5fb29f27292a5326617c6b44d3a3cfef7de13b8938dbc172ce226be471076c3ed2256ed6215139b2ccc2687e956500118e1738b2a6ce220605858f452c97fe32d9e7f67acd58691958c383b67ecde5d97202aed19452feb20505fcfe1f8b3bc862e9c175075a421cd0f66cdb31639fcf1c8d48bac5ac91faac244587ffd919264ab846bef9da3bf52394fcde51e2c6fe1d646b3b3c1414767105d45bdfffdf81c64bf97402d14b7450372af18cdf222df7ae8a247e07b38be1fec4c3a9fbfde9ca1c46f84925f5d60587a1f8eaff1d25a494aa0d9971f30bc4c94314ef172bc1db37dba2d49bf08aedf67b69886862009d2d78beb162efec776b671a5138b73654db6ad2ed57bd264bef52c5502ab1732bc1a262bc8066e77f55f5fa4046480181d1aac2538fdbaf4f7d90e45e509e211a425470eaba4ea169469287cfb919b7fff45fd9ab0a2a5e18c5253a7238663146390fca2a6da3c357934131b62b3ec5163aeca6df0090f241f389b095744b2ff5f60db1b0a241716f91884dc9ea078de5ae18290d7d1d941f8fad23781585cdce948701b818c479b4c530a67d2b117879e76a28ed86bc908b884b06e99ce809760aa008d7234b4027470cc478113da52b3bbe262e711a1a7621285b13e052f8af00f598adfafdcadf476a9e150925dd59d506afc1904108d33482b014908eb44d5c6102356f3fd3300fbf53af26bdf524a3e36a8c9231358be25235d8e69fa634e2a31870150138a55f970824c8e1c9230732eff272661bd50fd39b9e679b96ff8375d7e86ba073eb77b4aa55bbfd17385e8c5f9ef7939e9c1f526164397aca9f63cba8fedaba94db636ef37ca9e4c6e4e66038f57e93053fc3d815d4851abba651c32582a0735f15add8fab702b31d5464cd2e02ea540d33d80f1db2c9fb96a51d60bff730842219aed4d9bb77485eb5c40e555a21321c3c387caf736305847b28b8ff7beb39c29588866b9225654bf3377fa762193f1c3694223e2718e05a3374f684d2c06bc63fbca928352c079cb1f5bfee73e9ef205edb25bc81db074241c51142c3d606b30ea89062b0f412550047d163d380e4900b5b014b33d253b5a3afc86271401e13344fa5fc30d6cf69c27bdaec3d66eb06bf4658820741ee855ece14cb60e57e2ae41823c3b3c92876ceda264972d9f58d6a67e13d12b8bc9b44b11d3dc28de30b090439a3991c6fcfa50936b900bb0006842e29be1e2e1c0f8786481cb85c66135a34be185b1d879c8d511416b55d50c2dca591374a5624cd60a9d4b8e8518bbe54c65fdfd7cc80fa8a04f70bca218e9de83ee8471221a88e97c48f39c3fee58aaf7e6932dab1281bbe68cf98ff0bde7bb61e381cdfdd545b4100e9304aa38bafadbfe1eb282fa5c6084b9d0402f0548b56ecdf213dbafad53039f777073762a3e68f81a3e79254812aacedfec98066913b59ae7aff99fd885fa04fa8861fc00bd7181f7a5d71777ff162d5f7d38c5b95345cabb9dc82ce7e6ab71387e73a30ca4d2ae46d8b2d1f475b647ed65ba2ee525f67c93854427e76d32fdc5cb9b2ad269d29bb9164d0ade03f281ba9cff3c36eed5c39128a39c2a4b14821a6ce01f3a5651b364d87fff74016b9753a8f1f783b232dcf5c7ff6b386200229fc8255d13c3a914fe7f3486d5d2ced0873af7cef28dda727c4195196205e56adf5e684b66a01563265f0f6e78c74f8fd85b75703244d87933eb7f46dcf6c818d5138726bf4288e18f01f93fba8bf0f2eec1a9eb1bf87bddc93b524c54ae4680a943486136e3a2bc59a998619b0993f8e529939539edc623ef506ed16cfa9e3ab69ea0242fb19c2c4409f65e4f1c0df48b1c2c63bf7a0f95647923ecbaaf3e7e6a8b73f539a51de85e1e6e41e807429a68670d75b8fa673e666499370610c6ca741ac6255fdfbf0ca7a2c66977ebda493b0dc9d42b8819f75ee63b7865190078a8deaee06f8be925869e85aa3841f8c355f0cb908b3ecbe9e3e8f7585550e2b85d6200e4a5c5446f18325a86d8260464c9bd577e33ca31bce62a0afe3b10e492aca009387f92c174bc1e089203c29940fadb1e68b3a992a1551930c056f12bc14b6e11e6a5d590ca0ee5b3e90fa21809842af8835479abac6634643605c5194c7173da65d0685e79cb35f361f4f4fdb74d4b6c324fcad2372d8bc4114b075297851507ec3031d459418a72f08d437787bab75c97df81a52dea41ef4c026f1a90f92544d75e8b681e57f763704d3f690ebe8990bcaa98731ffc39be0b94fb96ba0adbdd37b411e2817cef89d149a0dfa6b70c112f49157a96ac9132aeff61f0c4c1acf9da919d1a019d25fda3777b366ff5e1946833b546a4b35ecb6d90d3c32131d9a3c8456ddd12b296baebce0ba8c01e1790f60aac41e7f45c5a41e40b23da2054e829e80655eac32334e9022d92af3fabdc40174556629d5fba32dd2854b3addafa58cf156d0779c508b4c1c2888f7a4d659598d8b29681fe50fc5b0fd4a7d1a9880c470d8eaa2b9acb3a08d495a0777932dcf3aadadabb605f6567da5fcd05a596d2e2553df8862cea4ce89a973ae30a854a3118bb0834c0c14fe7456c5c9b41ee0bea5873342fe38199d803620962a31060cfda692149ba33c82e83c01251f6fac7a05d44dcc9849b491538e47bd3ae7117257a45c1d1ebc0f6dbe7eb9645672040e0e531bea0a2ef81bafd668be0fe10a94491328e7ab102b852b5e990eb69e6ce1d419d94b31190a374d36e3b984f4f5cc2ac9c43775bcdb0fc94d62cead43cf0c5b9a8e98abab5c22dce446ed7fa3903b1f1fdb4c0feab99f202a63b7dee8c4bcc007aecf112f9e274c5ebbab4796b85879aff50e0711d5e15b48ad5f18b221b6add47cac8ec8529125f749e652927bbd688ba74d42688f64afd77324080a1a26fc51f86f8c3f26328011b4aa8141e5a8c74f68311c6fd413e146bd298f4e13b2fc1d2b9fdf8b9d0f1ff5ee07783d532858604d9789419875ef15fe37d3d18e0c92e4424674d1c28cd1c3b1d6dce393a92728472588da5e65067c06990eb9aa158f9c3875c44dc4e4a536fa64d920f0fc296032c008feef1f0d59e5fa135c57f34acbf9a75ee314ff7cbc4a82a8c269166805199de712d25af0b9d79077576f37ea52e1933013d1761dc4b9d290c0376063050558acd69b5342e83160bd1c4da90dc039adacea2230538629c2d1246bff112a53e3bbc809ab647f72d84584", 0x1000, 0x24000000, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:30 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101200, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access'}}, {@nodevmap='nodevmap'}, {@nodevmap='nodevmap'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}, {@fowner_gt={'fowner>', r5}}, {@smackfsfloor={'smackfsfloor'}}, {@subj_user={'subj_user', 0x3d, '/dev/vcs\x00'}}, {@appraise_type='appraise_type=imasig'}]}}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000640)=0xfff, 0x4) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b000000000000000102000000000000912f263c902266a09300acccce5d0db90e292a3628e1a982f988b14c567045a859624d18e5cedaac0ee54ae0802f5ec946b3f475f422a3f23317c9ae519968c68e06239ca415664657608d2261f2141897632b1b7b8d74edcb330e5de5e36f027102d4eac74e595c3c1150dad8cd56acf3fe"], 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:30 executing program 1: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/102) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000001c0)={0x1, 0x20, [0x1ae843bd, 0x80000001, 0xf3, 0x9, 0x80000000, 0xfffffe01, 0x2, 0x1000]}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r2, 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x7, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xe, &(0x7f0000000140)=""/14, 0x40f00, 0x5, [], 0x0, 0x1b, r2, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x3, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x78) 04:36:30 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x741081, 0x0) connect$nfc_raw(r2, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000000)={0x2}) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4501, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) connect$nfc_raw(r0, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6}, 0x10) socket(0x1, 0x8080d, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2a800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000013c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f00000014c0)=0xe8) socket(0x7, 0x4, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', r4, 0x29, 0x18, 0x7f, 0x57, 0xb, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x8749, 0x20, 0x40400000}}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r5}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) 04:36:30 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) getgroups(0x6, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x810000, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@afid={'afid', 0x3d, 0x7}}, {@privport='privport'}, {@cache_fscache='cache=fscache'}, {@uname={'uname', 0x3d, '-]'}}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x36, 0x38, 0x61, 0x61, 0x33, 0x61, 0x61], 0x2d, [0x61, 0x34, 0x64, 0x37], 0x2d, [0x33, 0x30, 0x64, 0x32], 0x2d, [0x66, 0x34, 0x0, 0x37], 0x2d, [0x36, 0x65, 0x34, 0x62, 0x33, 0x38, 0x30, 0x65]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x32, 0x32, 0x33, 0x64, 0x34, 0x36, 0x30], 0x2d, [0x34, 0x34, 0x34, 0x32], 0x2d, [0x33, 0x34, 0x66, 0x62], 0x2d, [0x33, 0x61, 0x62, 0x30], 0x2d, [0x34, 0x66, 0x64, 0x63, 0x65, 0x35, 0x64, 0x37]}}}, {@obj_user={'obj_user'}}, {@fsmagic={'fsmagic', 0x3d, 0x5f72ccf4}}, {@smackfshat={'smackfshat', 0x3d, '$('}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '&I)\\+}*T}-([+\xd4'}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@uid_lt={'uid<', 0xee00}}]}}) 04:36:30 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r0}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x801ff, 0xc4880) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'sed\x00', 0x0, 0x87c, 0x17}, 0x2c) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:30 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x401) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) connect$nfc_raw(r0, 0x0, 0x0) 04:36:30 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x741081, 0x0) connect$nfc_raw(r2, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000000)={0x2}) 04:36:30 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000001c0)={0x9b, ""/155}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:30 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0xfffffffe}) connect$nfc_raw(r1, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x1}, 0x10) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="829744618b227026a8ac5126516bfc16c014789f1834b97b0e3748bed435eda5668c16977cb145b188a5d10fc2bac73a298200f3209ef25f25fdc4aba88a1edeb1aca069c929c001daf5b2ebbd0e82f2be68dd34c75160f9240601d3940972dc3b4205550ba6c59bf3697a22cda2201b35081825a0b645f696d92ca39e607b034dc313561ac0853799dd7f2cd602d60a9775c08d59234ad3e991b148e8b63552475815a81b0daa6c381880b5c0ff2c16804447a339163d45303ce2edde03b3585b786eb0d5aba7d81d74", 0xca, 0x20000000, &(0x7f0000000200)={0xa, 0x4e24, 0x998, @remote, 0xfffffffe}, 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000000)={{0x2, 0x3, 0x2, 0x4, '\x00', 0x401}, 0x1, [0x7, 0x100000000, 0x3, 0x1, 0x3f, 0xffff, 0x6fe, 0x8, 0x1, 0x1, 0x2, 0x8d, 0x7fff, 0x2, 0x0, 0x8, 0x0, 0x0, 0x100, 0x7d, 0x5, 0x9, 0xffff, 0x29, 0x9, 0x2, 0xe38, 0x7, 0xfffffffffffffffe, 0x6907, 0x7fffffff, 0x9, 0x0, 0x3, 0x3f, 0x8, 0x7ff, 0x9, 0x0, 0x9, 0xc90e, 0x21, 0x3, 0x3, 0x9, 0x0, 0x7, 0x8000, 0x8, 0xffffffff, 0x7, 0x6, 0x6, 0x7, 0x2, 0x3, 0xfffd, 0x20, 0x5, 0x4, 0x4000, 0x1d, 0xa0, 0x8, 0x7fff, 0x7ff55258, 0x6, 0x7fff, 0x9, 0x2, 0x84c, 0xd0, 0xaea6, 0x1bf2, 0x8, 0x6, 0xfffffffffffffffe, 0x8, 0x6, 0x6, 0x200, 0x491f, 0x40, 0x80000000, 0x2, 0x7ff, 0x1, 0x5, 0x80, 0x6, 0x5, 0x8, 0x80000001, 0x3, 0x0, 0xfffffffffffffc01, 0x7, 0x7, 0xda, 0x6, 0x7, 0x7, 0x0, 0xffffffff, 0x6, 0x4, 0x4, 0x19e1, 0x2fb, 0xd6b, 0x5, 0x101, 0x4, 0x80000001, 0x100000001, 0x3, 0x1000, 0x0, 0x8b, 0x4, 0x9, 0x1, 0x4ed1, 0x3, 0x2d4, 0x9, 0xfffffffffffff39a, 0x7f8]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x6600, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004800000000006c1"]) connect$nfc_raw(r0, 0x0, 0x0) 04:36:30 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) connect$nfc_raw(r0, 0x0, 0x0) 04:36:30 executing program 5: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/102) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000001c0)={0x1, 0x20, [0x1ae843bd, 0x80000001, 0xf3, 0x9, 0x80000000, 0xfffffe01, 0x2, 0x1000]}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:30 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = gettid() r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xc2c, 0x440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000006861b5d50fa3ac6fed695d95fab8fb5236547adb72b45c7b2eee240bc2392a636360469bc6651d2bf6eb6b19d7fffed4aab641ec928c1e0b8fd0364ab125c3005f0e90071306d11e3079a29c2eae4eca77d14cfbd5508fd6ddedb27096b4eb5c91a9411f6b6368f14ab5684e5ab0024c4a2021f6fa9a89819e870215ae1e686a322315effc3f296558d0abb0089112458aa5b7c6c7d49d1a00784d1b49a3058d3fd471c9582d3b048accb2c913a3f1880ebd0aa53c12213307b1caa05b86d5f95f27d846cb6e38aa57311524616520f2c33dfd6974c595fa576e3623e287eea73332"]) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000480)={{0x9, 0x3, 0x6, 0x2}, 0x5, 0x400, 0x5, r0, 0x6, 0x80000000, 'syz1\x00', &(0x7f0000000100)=['\xc5\x00', '\x00', ':*\x00', '&!,\'}{\x00', '&\x00', '%u!\x00'], 0x13, [], [0x2, 0x6, 0x3, 0x9]}) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x19, 0x4, @tid=r0}, &(0x7f0000000440)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x3) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r2, 0x0, 0x3, &(0x7f0000000040)=':*\x00'}, 0x30) 04:36:30 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0xfffffffe}) connect$nfc_raw(r1, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x1}, 0x10) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="829744618b227026a8ac5126516bfc16c014789f1834b97b0e3748bed435eda5668c16977cb145b188a5d10fc2bac73a298200f3209ef25f25fdc4aba88a1edeb1aca069c929c001daf5b2ebbd0e82f2be68dd34c75160f9240601d3940972dc3b4205550ba6c59bf3697a22cda2201b35081825a0b645f696d92ca39e607b034dc313561ac0853799dd7f2cd602d60a9775c08d59234ad3e991b148e8b63552475815a81b0daa6c381880b5c0ff2c16804447a339163d45303ce2edde03b3585b786eb0d5aba7d81d74", 0xca, 0x20000000, &(0x7f0000000200)={0xa, 0x4e24, 0x998, @remote, 0xfffffffe}, 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10) 04:36:30 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x6a, ""/106}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:30 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000100)=0x3, 0x4) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000080)={0x690, 0x6, 0x7fffffff, 0x92000000, 0x2, [0x8, 0xe3c, 0x80, 0x101], [0x3f, 0x3, 0x712a, 0x1ccd], [0x3, 0x6, 0x4, 0xfffffe01], [0x1, 0x1, 0x47, 0x2]}) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x100, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="d5406d223e7d12e16cc53fabcbc398e93bfc7278fc0f7153bf22dd2acd2c9a9b1a14da99cefcc416efc3e8eb8b99693037c09dc43bfff2fb21ec52ab1c1abc09027c72bd3892b67668a280eb94c4cf9a02ac38a6d6ac1273c5d5ea943d2f5ee878f7895fe85082ce3374808d86e0c941abcfc62b01b5600f0690c1c35e3596a66cf92783627839e2f1504b8bb59b92087928b0aba9c686cb41482d5a18418aa657cde1bc634917", 0xa7}, {&(0x7f0000000140)="8c692d36bdbe80c52824b82ab40715abe6f02b6a73009559d7a85ff96d9b8924af6fa5ac8b7140d021a018308801432122288e4a4b1cf477904a404ba8a655054247411f5eca4d0e224645823aee60a0eaa8df1729ee9d1d4de1a5b37c29fd927ee92be89819cdb13e384dbc3552aa38b41a1abbd2833c95a99005b65e326f7d14800bfdc11fd96e97df53d7315c44e9274602d5dd5515be978d8be1c488b4ab4d5151f917c1ded09665ad4d81ca5d4d7d96039d43d0ecf454a0dfb75a55bfe5e553f26ec02ae8a5db9f4d9bf644de", 0xcf}, {&(0x7f0000000240)="af961df89d8bbfe570f934885a67c7cf257a7435f72796037e341ad6eb9b4f143b9f7d2b81f27940161ad3d1f9777b25f9f80aacfcea0c7a058bb874da378e0d1f6ce325e5fbfed6791254c80cbaa3775f80921a1f73d8478821f30a93c7a9ca56eb8f79e5319b1fb1fb36b75a445145916ed836d6fe5b1e2b924a07eb0dd2b2f8bec1a04811719de7fbd2b3a94e0bcb2a590aca80e439471f370c3a2c5decfd3a710b9e105164933ec36f56f275a8ec1ff64635447db0d24db7ef8a844c0f", 0xbf}, {&(0x7f0000000300)="95c0c71531f470d5", 0x8}], 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1010}, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000001400)=0x1) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x5, 0x5}, 0x10) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:30 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x90880, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140), &(0x7f00000001c0)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7f6, 0x46ae00) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1b) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x2, r1}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1c) 04:36:30 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:30 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:30 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) 04:36:30 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:30 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 4: select(0x0, 0x0, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:30 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="870400000000000007080000001200867f11f205147d7c6efc610100090004c204000000d107100000000202010900ff"], 0x30) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1, &(0x7f0000000080)=""/158, 0x9e}, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:31 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:31 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:31 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x282, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:31 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:31 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:31 executing program 2: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:31 executing program 4: select(0x0, 0x0, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:31 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:31 executing program 2: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000380)={0x0, 0x9, 0x80, 0x5d05, 0x2, 0x83, 0x9, 0x4, 0x7, 0x6, 0x9, 0x4}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000000)=""/228, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=""/233, 0x10000}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:31 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x40, 0x0) connect$nfc_raw(r1, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x4}, 0x10) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 04:36:31 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:31 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:31 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x321000, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:31 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) connect$nfc_raw(r0, 0x0, 0x1f) 04:36:31 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:31 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:32 executing program 4: select(0x0, 0x0, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:32 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:32 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:32 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:32 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/104, 0x68}], 0x8, &(0x7f0000000640)=""/165, 0xa5}, 0x2000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-control\x00', 0x84004, 0x0) connect$nfc_raw(r1, 0x0, 0x18) 04:36:32 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) 04:36:32 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:32 executing program 2: socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:32 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:32 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc243, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x404040, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x40) 04:36:32 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@private2, 0x12}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:32 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:33 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r1}) 04:36:33 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2c67) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@loopback, @private2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0x401, 0x7ff, 0x500, 0x9, 0x83800000}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x18}, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x18000, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x26, 0x5, 0x3, 0xc4, 0x44c, r3, 0x80000001, [], 0x0, r5, 0x2, 0x5, 0x1}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe92a}, @exit, @map={0x18, 0x3, 0x1, 0x0, r6}, @alu={0x4, 0x1, 0x5, 0x3, 0xe, 0x100, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='GPL\x00', 0x800, 0xa8, &(0x7f00000004c0)=""/168, 0x41000, 0x3a, [], 0x0, 0x18, r4, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xa, 0x3, 0x4}, 0x10, 0x2c6a3}, 0x78) r7 = socket$inet(0x2, 0x1, 0x80000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r7}) socket$inet6_udp(0xa, 0x2, 0x0) 04:36:33 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4200, 0x0) r1 = socket(0x762476f9c088b271, 0x6, 0xf9) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r1}) socket(0x29, 0x800, 0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x80000000, 0x2}, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r3, 0x0, 0x0) 04:36:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e24, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x76}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000080)="cbdfc8d5a7641db305fff3c7b8db44fb5ae857ca50edf718", 0x18}, {&(0x7f00000000c0)="4d0cfe8edddfcd806bad5b2e2aac141229d91fa0189a03eadfb4df723d5c55f1692531f0fb00b1e4edf451e879c96403acc7f93e6415dfb16cb021a5d6c785dca45f4345e4a9e44ba33bccdecc94409ffb32c6c01ef782ed445bf264899bba63049bee4118d1444bbf83cc7a42eef904fe69201fa70c880c2cc1121c838c42f4c5e38c6171ec6dac6ad7c04b919af9055dbe672c96ad706adf070000aa1ef7a856042230fe6d1b86", 0xa8}, {&(0x7f0000001740)="35a407c84804066d3b48b5e946adc01915950b10096f5a09baba71bc00d03f25e0b9dbe410a79b27236b8d32162d1f2cd29618c6c20dcf37408fe7d626bfc9b8d37254046184415c64f878526ee3c40bea08ee010400009853092ad19d6b0839b8e6d8cb0ec55520c3a3f1934174d0e9e7c2c060d2e92b0aaa377ae5b143ba035e6e3ba2840b22ab6c17a8095578090dbee404006b8b7d0541e3cbb7bf6a7278e235ca84d41661249867c02c43082ec6cf99591f5b23621a2d47109602779dcb63989283d6408d2788b345844f290ad5945cd022fed5e16f6ae7b295a1dafe7fb9cb8419c7d8fb9e54f2f1b805f58f67", 0xf0}, {&(0x7f0000000180)="a69ff5dda1ff4a211eef4dbce0bbb7552cc1bae2580316b093edb6b1f9e317f5d9c049c204863acfff69e6c29e7d5933137c03a5f4fa9fcd588b186a91ba38ed1625400f3a8f83fb05d8f4e34c03a572a73edc9bb2b6", 0x56}, {&(0x7f0000000280)="9b577240e0da24d52f8fb9ddfe0b806a7da5e52e13dba18deabdaa11edfe92f6c38633b49f2b5475ee79c6a6f8b0c25b401d5df825c533d134bf1bac9509aec71002e80f51e1d0d0d57ade6ee14d13fb896c8a29d463486f2f2618e5a05e93e1e305de8194feb2095882c7ddb97b48e4bab385a48bb0e2407e1e292a36d651ad18d732fe113120c0856a13ae673ffbc03bd983bf6f474fb386e2c29f6ace40b71ead9c94a159f65766fb55b2b61d8b22561ca237df7b142c6d894c23bbbd7cf07b3b705e3ea5b638bd821785aa040a641c2b3f028228a1", 0xd7}, {&(0x7f0000000380)="aec73e8e26bc", 0x6}, {&(0x7f00000003c0)="0643bb8138f5f9b6af56685888d35f06bf734d0ec86c074f46eefddf2a2f8509f676dcc413bfd9df85916b857714f7ad63a905", 0x33}, {&(0x7f0000000480)="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", 0x1000}], 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="a80000000000020029000000370000003c1200000000000000000807187d20000000020406200100800000000000001f000000000000040100b30d0008000100075800000002144000041f000000000000007f00000000000000050000000000000001000000000000000200000000000000a8a80000000000000200000000000000000000000000000002000000000000000600000000000046a300000000000000290000003600000033000000000000000502004000000000380000000000000029000000360000005c030000000000000401050401ea030104c9000000000000000000000100000000001400000000000000290000000b0000000000000700"/273], 0x118}, 0x20000081) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', r0}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) recvfrom$inet6(r2, &(0x7f0000001500)=""/25, 0x19, 0xa8e43114b48c084c, &(0x7f0000001540)={0xa, 0x4e23, 0x7, @private1, 0x1}, 0x1c) 04:36:33 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x2, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:33 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:33 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x2002) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xb1986b1b01506b9b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="870804444000080000000000000000000000000000000000fc000000000000000000000000000000fc02000000000000000000000000000000000000000000000000000000000001"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 04:36:33 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x141000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 04:36:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:33 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:33 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:33 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:34 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:34 executing program 4: select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:34 executing program 0: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x2001) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) 04:36:34 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x140, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:34 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast1, @loopback, @loopback, 0xb8, 0x0, 0x1, 0x600, 0x2, 0x2000000}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x401, 0x8040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) 04:36:34 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:34 executing program 0: bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x3}}, 0x10) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) connect$nfc_raw(r0, 0x0, 0x0) 04:36:34 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 04:36:34 executing program 1: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x8800, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) 04:36:34 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:34 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000040)={0x30, ""/48}) connect$nfc_raw(r1, 0x0, 0x2c) 04:36:34 executing program 1: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff0001}, [@ldst={0x3, 0x3, 0x2, 0x3, 0x6, 0x1e, 0xfffffffffffffff0}]}, &(0x7f0000000340)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x14, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0x9, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1c}, @generic={0xc1, 0xf, 0x2, 0x3, 0x10000}]}, &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x3, 0x81}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 04:36:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x800, 0x9, 0x4, 0x1f, [], [], [], 0xb7, 0x2, 0x1f, 0x3fc, "f65b09bd6f676050819000d4af5c8a8d"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:34 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:34 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x90200, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$nfc_raw(r0, 0x0, 0x0) 04:36:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 04:36:35 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:35 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x2, 0x1, 0x3, 0x81, 'syz1\x00', 0x18b}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x100) 04:36:35 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=[0x6, 0x3, 0x200, 0x90d1], &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:35 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) r5 = socket(0x6, 0x800, 0xb8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x4, 0x6, 0x7ff, 0x56, @ipv4={[], [], @multicast1}, @mcast1, 0x20, 0x40, 0x4, 0x8f3}}) 04:36:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:35 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000180)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x8, 0xffffffff, 0x1f, 0x9}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)) 04:36:35 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff0001}, [@ldst={0x3, 0x3, 0x2, 0x3, 0x6, 0x1e, 0xfffffffffffffff0}]}, &(0x7f0000000340)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x14, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xf, 0x9, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1c}, @generic={0xc1, 0xf, 0x2, 0x3, 0x10000}]}, &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x3, 0x81}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:35 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x8}, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:35 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:35 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0xfffffff7, 0x1}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x0, @private1, 0x3f}, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}, 0x7416, [0x20, 0x7ac9, 0x80000000, 0xa00, 0x7, 0x3f, 0xffffffc0, 0x8]}, 0x5c) getsockname$inet6(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)=[0x4000, 0x9, 0x42ae, 0x9], &(0x7f00000000c0)=[0x7, 0xa610], &(0x7f0000000100)=[0xfff, 0x2, 0x7]}) 04:36:35 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 04:36:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:36:35 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 04:36:35 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x8}, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="a83ceae69fae34be48c3afbef333f74c56a174ca29cd84c874831a7ba70516e492fa81d4fb081e725b3dc3e8cc53e5515ef82512b3280e9c60de3f1032eec7a52e84f8ad3e1d32f82cd3190b33fdf9614991869cd60a57ef53b040cf6c0a1c5dbb0d9037e1a4cb00d069b1d7b615d6bb5017ada4254caefd9ef0b53704c0eaf7216d61abfde58bb98ad952cf198542244e6c8ac6c4a5d10064795c5756bdbdc1b746bca490d5a7f286dc6e501b6311f3e27b10b65d94ff227a2ce6f65ca7791e4ee41246b85c728e4630a772adb8f4129fa4ee7f89052f66803bf22447e6de5d522406f5b00977aabf7ee2429adff1f902352acb4e279d5421ab0a76fc56708162d8ad5418d2782150095407c8e63e2056fee5feaba12fce418e3f7f000000ff98d95511d7d9e5f9ab9f5fe1058d172ac640", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) r5 = socket(0x6, 0x800, 0xb8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x4, 0x6, 0x7ff, 0x56, @ipv4={[], [], @multicast1}, @mcast1, 0x20, 0x40, 0x4, 0x8f3}}) 04:36:35 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:35 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x7fff) 04:36:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) r5 = socket(0x6, 0x800, 0xb8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x4, 0x6, 0x7ff, 0x56, @ipv4={[], [], @multicast1}, @mcast1, 0x20, 0x40, 0x4, 0x8f3}}) 04:36:36 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000001440), 0x4) connect$nfc_raw(r0, 0x0, 0x0) 04:36:36 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:36 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) r5 = socket(0x6, 0x800, 0xb8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x4, 0x6, 0x7ff, 0x56, @ipv4={[], [], @multicast1}, @mcast1, 0x20, 0x40, 0x4, 0x8f3}}) 04:36:36 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x446e00, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:36 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x8}, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:36 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x400000) 04:36:36 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x841, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket(0x8, 0x800, 0x8001) 04:36:36 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 04:36:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) socket(0x6, 0x800, 0xb8) 04:36:36 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28081) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80}, [@map={0x18, 0x7, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x5b, &(0x7f0000000240)=""/91, 0x40f00, 0x10, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x40, 0x9}, 0x10}, 0x78) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 04:36:36 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:36 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @local}, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:37 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@mcast1, 0x68, r4}) 04:36:37 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x8}, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:37 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x841, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket(0x8, 0x800, 0x8001) 04:36:37 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:37 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0xc00, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000380)) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, [@generic={0x2, 0x4, 0x5, 0x4, 0x80087}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f00000001c0)=""/250, 0x41000, 0x10, [], 0x0, 0x1a, r2, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x1f, 0x10000}, 0x10, 0x120a1}, 0x78) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xa, &(0x7f0000000480)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @map={0x18, 0x8, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0xffffffc0, 0xa2, &(0x7f0000000500)=""/162, 0x41100, 0x4, [], 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x7}, 0x10, 0xdd92, r4}, 0x78) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 04:36:37 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/236, 0xec, 0x100, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @ipv4={[], [], @empty}, 0xd19d}, 0x1c) 04:36:37 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:37 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) [ 1635.802392] binder: 8271:8279 ioctl c0306201 20000280 returned -14 04:36:37 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x784ad14b2c776ed4, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x5}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x2, 'rm'}, &(0x7f00000000c0)=0x26) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x2}, 0x10) 04:36:37 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/236, 0xec, 0x100, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @ipv4={[], [], @empty}, 0xd19d}, 0x1c) 04:36:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=@dstopts={0x8, 0x9, [], [@pad1, @jumbo={0xc2, 0x4, 0xfffffffe}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x100000001, 0x385, 0x8, 0xfffffffffffffffb, 0x4, 0x3, 0x4]}}]}, 0x58) [ 1635.910393] binder: 8271:8303 ioctl c0306201 20000280 returned -14 04:36:38 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x200, 0x6000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000000c0)={0x2, 0x6, 0x3, 0x4, [], [], [], 0x59, 0x2c04, 0x30b84f44, 0xebcb, "b97912ab43c630b61fc5a36c534c7c06"}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:38 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:38 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="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", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:38 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, 0x1}, 0x5) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x4c0001, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "c9"}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:38 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x0, [], [], [], 0x3f, 0x1, 0x80, 0x8, "acb9963b0552b8530700a9b2e3534b26"}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x1200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000400)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x109000, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000003c0)=0xe5) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000040)={0xfffffff7, 0x9, 0x81, 0x1000, &(0x7f0000000480)=""/4096, 0x9e, &(0x7f0000000300)=""/158, 0x39, &(0x7f0000000000)=""/57}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 04:36:38 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e23, 0x80, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)="f472d250dfc7", 0x6}, {&(0x7f0000000700)="a83ceae69fae34be48c3afbef333f74c56a174ca29cd84c874831a7ba70516e492fa81d4fb081e725b3dc3e8cc53e5515ef82512b3280e9c60de3f1032eec7a52e84f8ad3e1d32f82cd3190b33fdf9614991869cd60a57ef53b040cf6c0a1c5dbb0d9037e1a4cb00d069b1d7b615d6bb5017ada4254caefd9ef0b53704c0eaf7216d61abfde58bb98ad952cf198542244e6c8ac6c4a5d10064795c5756bdbdc1b746bca490d5a7f286dc6e501b6311f3e27b10b65d94ff227a2ce6f65ca7791e4ee41246b85c728e4630a772adb8f4129fa4ee7f89052f66803bf22447e6de5d522406f5b00977aabf7ee2429adff1f902352acb4e279d5421ab0a76fc56708162d8ad5418d2782150095407c8e63e2056fee5feaba12fce418e3f7f000000ff98d95511d7d9e5f9ab9f5fe1058d172ac640", 0x132}, {&(0x7f0000000540)="0510c1fdffffffffffffff8d500fdb007187a1a86dcefb89451ed6086817285134dec7d6e8b61e6ebda5a69f1b7b57546e658a552741c6c3ab99f0db2a0534b93ea8f513082ef834e0e6cfbc65ade22e9b2cde6a41d52fd01293e5cab19421f693cbf3e594da2d6e24f0d4aa451378c6a73c758a0ce6fa025f39dc5d43936cd027c19778d82cdab00c2aa43efc15531af7bbffdb69db14995cd8901de2c212face26c1d0a282cbfb5e3b1692a9bfffa3fd6896ab520039e8925815060000007f1b235c25", 0xc4}], 0x3}, 0x240000b0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:38 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "c9"}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0xc00, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000380)) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, [@generic={0x2, 0x4, 0x5, 0x4, 0x80087}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f00000001c0)=""/250, 0x41000, 0x10, [], 0x0, 0x1a, r2, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x1f, 0x10000}, 0x10, 0x120a1}, 0x78) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xa, &(0x7f0000000480)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @map={0x18, 0x8, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0xffffffc0, 0xa2, &(0x7f0000000500)=""/162, 0x41100, 0x4, [], 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x7}, 0x10, 0xdd92, r4}, 0x78) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 04:36:39 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)={0x94, 0xc6d, 0x15, "39df329b7759ced0f6fbee634becfe1d1fbdea9b1a35f21513ec00edb13ffafced5b057d25cdc279c6a715f5b70ca2f40209896b71938495f824150b1d9df08fc0d2cd19fd0e5c36e588d351fdf18e1bbc5085745f93a8134ba7b26f57b38e637a6040b76866b4ae0888a45897a6b0437d113f8d9c2ad956b74105b168c6203d70424d4d86fed32cee8c1b178d193335da831e4b"}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3f11a0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r4, 0x29, 0x8, 0x3, 0x9e67, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x700, 0x1, 0x4}}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:39 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f00000001c0)="31b79af5af2a27e945258af9a0bbd7bc3ae7c42d2537ae5d26cfb3e5f4d0e929e0436d78618396c93114fa326712cc5271236a99309ef0dec35a3859f34dfd42f92555f9784809bfa70e70665e462eea13d2411561b2380d6b4557645736dd7796e18dbcc41954efc814c8aa2d2707f31b555eac5116a1eb1083a862219e979ff295ccb25e56611d773f090880b68dcbc903c66004ccfc1baca26aaa313f0099ff87912d7a13039af8179846b0bacf66ca0dcce098fb8acaa41cabf8c11d547e0e23", &(0x7f0000000040)=@udp6=r3, 0x1}, 0x20) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 1637.529600] binder: 8391:8394 ioctl c0306201 20000280 returned -14 04:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0xc00, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000380)) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, [@generic={0x2, 0x4, 0x5, 0x4, 0x80087}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map={0x18, 0x7, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f00000001c0)=""/250, 0x41000, 0x10, [], 0x0, 0x1a, r2, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x1f, 0x10000}, 0x10, 0x120a1}, 0x78) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xa, &(0x7f0000000480)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @map={0x18, 0x8, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0xffffffc0, 0xa2, &(0x7f0000000500)=""/162, 0x41100, 0x4, [], 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x3, 0x7}, 0x10, 0xdd92, r4}, 0x78) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 04:36:39 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 1637.761382] binder: 8441:8444 ioctl c0306201 20000280 returned -14 04:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:39 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, &(0x7f00000001c0)={0x77359400}) 04:36:39 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0) 04:36:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:39 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x4a8843) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:39 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:40 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000000)) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x280, 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:40 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f00000001c0)="4b67e8ad40929fd27de84f82510aff43fbdee1ad297a5a9a6176c143a383a46149db8429af63293d9c3a3d1541c03da62119cd298a40a4d0797c4220caf4cdec3b3b012ae20d9c5e8bbae18db8378e8b188dc10e62a211c3f9580055349124982506adda16e2d0cdcd91c8d9255a5438fc533c23ff1b2a3625e33c44939ceda062315e450f078899c84463c286f941374771b9cbefb21b", &(0x7f0000000000)=@tcp, 0x1}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000340)=""/63) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x161982, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:40 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x340, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:40 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:40 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) sendmsg$tipc(r3, &(0x7f0000001280)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="ea198f483e370cc11337aebfebdaa269719b99cbcd0a18e1b54122d61a62c2265b8ba901e1fded253388ef9eeef5dbc24144847d78fc0c62f3181bed444746a801b79d65667d23cd07e406305e5dae7c261d6144999d048ccd2fdb5dba616181dcad9595316e3389cfd9bf8e1cbd751bd90a9673a025ce91163612f1bbe9bb93dce207a125dee1d0607940663793", 0x8e}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000040)}], 0x3, 0x0, 0x0, 0x40000c5}, 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000012c0)=r0, 0x4) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x7f, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x7, ""/7}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000040)=[0x4, 0x81], &(0x7f0000000140)=[0xb, 0x7, 0xfffffeb8], 0x12, 0x8, 0x0, &(0x7f00000001c0)=[0xffff, 0xb2, 0x2, 0x20, 0xa, 0x4, 0x7ff, 0x80000000], &(0x7f0000000200)=[0x3, 0x4, 0x9, 0xfffffffd, 0x303]}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x20, 0x5, 0x9}}) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x0, 0x5, 0x9}}) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x0, 0x0, 0x9}}) 04:36:41 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x0, 0x20, 0x5, 0x9}}) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700}}) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x7, ""/7}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000040)=[0x4, 0x81], &(0x7f0000000140)=[0xb, 0x7, 0xfffffeb8], 0x12, 0x8, 0x0, &(0x7f00000001c0)=[0xffff, 0xb2, 0x2, 0x20, 0xa, 0x4, 0x7ff, 0x80000000], &(0x7f0000000200)=[0x3, 0x4, 0x9, 0xfffffffd, 0x303]}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:41 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x12d101, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6e}, [@exit, @generic={0x84, 0xd, 0xc, 0x4, 0x4}, @generic={0x6, 0x9, 0x5, 0x7, 0x8000}, @map={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r7 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x81, 0x88e00) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x0, 0x5, 0x9}}) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700, 0x0, 0x0, 0x9}}) 04:36:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1, 0x700}}) 04:36:41 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:41 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:41 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) socket(0x1a, 0x5, 0x80000001) 04:36:42 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x7, ""/7}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000040)=[0x4, 0x81], &(0x7f0000000140)=[0xb, 0x7, 0xfffffeb8], 0x12, 0x8, 0x0, &(0x7f00000001c0)=[0xffff, 0xb2, 0x2, 0x20, 0xa, 0x4, 0x7ff, 0x80000000], &(0x7f0000000200)=[0x3, 0x4, 0x9, 0xfffffffd, 0x303]}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x12d101, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6e}, [@exit, @generic={0x84, 0xd, 0xc, 0x4, 0x4}, @generic={0x6, 0x9, 0x5, 0x7, 0x8000}, @map={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r7 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x81, 0x88e00) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) 04:36:42 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x12d101, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6e}, [@exit, @generic={0x84, 0xd, 0xc, 0x4, 0x4}, @generic={0x6, 0x9, 0x5, 0x7, 0x8000}, @map={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r7 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x81, 0x88e00) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) 04:36:42 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:42 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x12d101, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6e}, [@exit, @generic={0x84, 0xd, 0xc, 0x4, 0x4}, @generic={0x6, 0x9, 0x5, 0x7, 0x8000}, @map={0x18, 0x1, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0x9}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r7 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x81, 0x88e00) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) 04:36:42 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x22a403) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000008000000180000000900000000000000000000e018170000ec10a7bc58c0575cc4391fc4c8d9e8afe7f37f0d34270f096997c751dad7193bc7327740eca7a86964a6ad1056eae71f87ce53", @ANYRES32=0x1, @ANYBLOB="00000000000000003d0d06000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001700000095000000000000005d526c71a1c4ea02dfdcfa01b0fc4e058db649e61b06bf7ae1e2cbff9e6a9e9cab1a839a8cbeb1ee6ba82bc9c6cb145e897e38c89ce709e79d9b4b8e33fbae04d91b"], &(0x7f0000000140)='GPL\x00', 0x3, 0x57, &(0x7f00000001c0)=""/87, 0x41100, 0x702118553b71fba7, [], 0x0, 0x7, r1, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x9, 0xb8}, 0x10}, 0x78) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x2000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) getegid() r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) socket$inet6(0xa, 0x5, 0x80) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:42 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:42 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:42 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:42 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x402440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0x5, 0x0, 0xea, &(0x7f00000001c0)=""/234, 0x42, &(0x7f0000000000)=""/66, 0xb8, &(0x7f00000002c0)=""/184}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:43 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) write$tcp_mem(r2, &(0x7f0000000000)={0x5, 0x20, 0x9, 0x20, 0x100000001}, 0x48) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)={0xec, 0x0, 0xfff, "739124ee0088e4f924cd93a631991047f0b049f6fa9a45f06164414d45b40639912be8e8331df3b2703191a85339e90d90571f7417638d1b81cc5392e7421f356f53be04ead868e5c4c2116f152e42d16a6217d06d3c6993d87a599e38c86a02038bd62e022d0a44cedac423cfbd8103ff563cf0d5efa49835d8b2fd529c880d27d4dde4d5e39a09a3d6bf8e04df8cf50c881390d1e7156fc84cbcfd50ccd818335944a7f57f517f95302c0c3515e71cff3cd52498e44db78da4e4a04ac6a167a51c5b0b9bf5272206d448d6c96da32fc9993deca08f0a63ff80f383ab27b9352e9976ace7cd895d8409db5a"}) 04:36:43 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)) recvfrom$inet6(r3, 0x0, 0x39, 0x40002072, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000040)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:43 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:43 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x422c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20580, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101000, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0, r1}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:44 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x7e, 0x7, 0x2326, "92277e01e941c36b09168700c0d78a8055ff30b1142551c1dfbafa8bb5f13e542a583a9c7deda2104a7c441925a27eff2f24e1241cbd097815be2985d13a730e4b9cf99392d2aad80104b0cab8ab5a6b3fe142f65346e3403d3748c6d3accf668b0426e2bc73571e251c9e4b0770125b5adb8e2fba4d379cb0ef54ee927d"}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x422c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:44 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0, r1}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:44 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 5: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x422c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:45 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)) recvfrom$inet6(r3, 0x0, 0x39, 0x40002072, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000040)=0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:45 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@local, @local, @dev={0xfe, 0x80, [], 0x19}, 0x8, 0x2, 0x9, 0x100, 0x7, 0x100000}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000540)=0x10000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x10, 0x3a4c, 0x8, 0x7, 0x8, r0, 0x2c, [], 0x0, r0, 0x0, 0x5}, 0x40) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000480)=@srh={0x84, 0x4, 0x4, 0x2, 0x7f, 0x78, 0xff, [@mcast1, @private0={0xfc, 0x0, [], 0xff}]}, 0x28) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/loop-control\x00', 0xa0000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x1000, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x13f, 0x3}}, 0x20) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) sendmsg$inet6(r4, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000240)="213e7eee4eb3c7816c59cdac12ddce1e473b7c0b154aa9a15e422bd4de1de56b616df90dd8f6408555c056da3e346db2f369786752159900a4c44a55b184071a4cbec10b47c2f319c140aaf1ddb37cefbfad3ede07fd3dca6da70769", 0x5c}, {&(0x7f00000002c0)="814114656b7df235365d3d81e91d0436df22b28d27c6952223f3dfbab239015f397540af220a0e03e9b6ced34869378ac5674ba144527b6cbe342771a3feab79b6a9f0bb410d70069dbe981f7032c37c8e10a2130989cbfe6f63d5cb8d513a2ee8fdcefecde2731bc8cb6e788d04094485895bff060b3ba93c1cce4521f1090ec4bc33a39e7c156cd9d6e5c7644abf6d435f84be701328c5b20a50b37c346d74e5648f5a5324d065c5ffd6d5e27e678a53e4c9bc8293bc1d1db5f3f8bf797fdcb7cb8f2d547d7078d52758b2aacab0ffd2", 0xd1}, {&(0x7f0000000140)="c4f7d678d766a822f583ac57b489", 0xe}], 0x3, &(0x7f0000000740)=[@rthdr={{0x18, 0x29, 0x39, {0xff, 0x0, 0x0, 0x6}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x5e, 0xd, [], [@enc_lim={0x4, 0x1, 0xfd}, @hao={0xc9, 0x10, @private0}, @generic={0x20, 0x23, "506759e3a2d95ca77b89503be0089e0dafaebbe2baf3f1aaef8636590f2a59a971a2d5"}, @hao={0xc9, 0x10, @private1}, @pad1, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xffff}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x0, 0x0, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x10}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @ipv4={[], [], @empty}, @mcast2, @dev={0xfe, 0x80, [], 0x1f}, @ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x3b}, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x74, 0x0, [@local, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x1e0}, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x20, 0x400280) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:45 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f800000}, @alu={0x7, 0x0, 0xa, 0x4, 0x3, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000001c0)=""/4096, 0x40f00, 0x5, [], 0x0, 0x1a, r1, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x5, 0x0, 0x1, 0xe5}, 0x10, 0x109a5}, 0x78) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x20, 0x400280) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:45 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x50a, 0x101000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000300)) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, [], 0x1}, 0x2}, {0xa, 0x4e23, 0x0, @private2, 0x77}, 0x9, [0x0, 0x4, 0x4, 0x40, 0x7, 0x1, 0x4, 0xf46f]}, 0x5c) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x35, 0x7f, 0x5d, @dev={0xfe, 0x80, [], 0x15}, @mcast2, 0x700, 0x1, 0x6, 0x7fff}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@local, @mcast1, @loopback, 0x8, 0x88, 0x6, 0x200, 0x4, 0x4010004, r4}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000200)=0x1f) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000, 0x121840) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}, {}]}) timer_create(0x6, &(0x7f0000000340)={0x0, 0x2a, 0x2}, &(0x7f0000000380)=0x0) timer_gettime(r7, &(0x7f00000003c0)) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={r6, 0x1}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 04:36:45 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x402440, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000140)={0x3, 0x5, 0x0, 0xea, &(0x7f00000001c0)=""/234, 0x42, &(0x7f0000000000)=""/66, 0xb8, &(0x7f00000002c0)=""/184}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:45 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000008000000180000000900000000000000000000e018170000ec10a7bc58c0575cc4391fc4c8d9e8afe7f37f0d34270f096997c751dad7193bc7327740eca7a86964a6ad1056eae71f87ce53", @ANYRES32=0x1, @ANYBLOB="00000000000000003d0d06000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001700000095000000000000005d526c71a1c4ea02dfdcfa01b0fc4e058db649e61b06bf7ae1e2cbff9e6a9e9cab1a839a8cbeb1ee6ba82bc9c6cb145e897e38c89ce709e79d9b4b8e33fbae04d91b"], &(0x7f0000000140)='GPL\x00', 0x3, 0x57, &(0x7f00000001c0)=""/87, 0x41100, 0x702118553b71fba7, [], 0x0, 0x7, r1, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x9, 0xb8}, 0x10}, 0x78) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x2000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) getegid() r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) socket$inet6(0xa, 0x5, 0x80) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:45 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:45 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:46 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:46 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x20, 0x5, 0x9}}) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x340, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:46 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x4a8843) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:36:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) 04:36:46 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x0, [], [], [], 0x3f, 0x1, 0x80, 0x8, "acb9963b0552b8530700a9b2e3534b26"}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x1200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000400)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x109000, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000003c0)=0xe5) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000040)={0xfffffff7, 0x9, 0x81, 0x1000, &(0x7f0000000480)=""/4096, 0x9e, &(0x7f0000000300)=""/158, 0x39, &(0x7f0000000000)=""/57}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 04:36:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 04:36:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d6d6d615f2c63616368657461673d2f6465762f6c6f6f702d636f6e74726f6c002c6163636573733d636c69656e742c667363616368652c63616368653d6c6f6f73652c756e616d653d2c63616368653d6e126e652c736d61636b667364da21167479a6caa556d7a3a5330c1da265663d5d2c7365636c6162656c4cd9b250680029e881ca3e6dc6391cc50fb9a3ec06791789172f836f9c9efa3a7d1f9b69848ec6c0301cf9295dc59f2281d0ca030f26c68003b9a3d4b78047d5b13f03dbaf7a11afbabd936aa53322191e5764a0fb"]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x84, 0x46, 0x0, 0x8b, r3, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 04:36:46 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:46 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x784ad14b2c776ed4, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x5}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x2, 'rm'}, &(0x7f00000000c0)=0x26) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x2}, 0x10) 04:36:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28081) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80}, [@map={0x18, 0x7, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x5b, &(0x7f0000000240)=""/91, 0x40f00, 0x10, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x40, 0x9}, 0x10}, 0x78) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 04:36:47 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:47 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x800, 0x9, 0x4, 0x1f, [], [], [], 0xb7, 0x2, 0x1f, 0x3fc, "f65b09bd6f676050819000d4af5c8a8d"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast1, @loopback, @loopback, 0xb8, 0x0, 0x1, 0x600, 0x2, 0x2000000}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x401, 0x8040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) 04:36:47 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x141000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 04:36:47 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@private2, 0x12}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:47 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@host}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:47 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x40, 0x0) connect$nfc_raw(r1, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x4}, 0x10) 04:36:47 executing program 4: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x282, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="870400000000000007080000001200867f11f205147d7c6efc610100090004c204000000d107100000000202010900ff"], 0x30) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1, &(0x7f0000000080)=""/158, 0x9e}, 0x0) connect$nfc_raw(r1, 0x0, 0x0) 04:36:47 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) sendto$inet6(r2, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus640)\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="42752e1007ad55d0fa451c608ae3c82f4099f135c75f8cfccce6970f9b8c8269669e189c18f183a327131162b0bb43a848fcecf32a6c4024be9420584a733d5deca428ffc7f34ce652c96f64243fe1841b", 0x51}], 0x1, &(0x7f0000000480)=[{0x68, 0x110, 0x0, "20bf31987db08caf96500761a6a784666b473dd8c8d81794561d98eb9be5ab165fb6670d65d5caba582ef7c5707acb11e9fe6436f190d51a65e5c3ee26be031d43f2990d6f9ff4d4592c0cd70a43f999f0b16d7706acc582"}, {0x1010, 0x115, 0x6, "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"}, {0xb0, 0xff, 0x4, "1de64e81868b71302d5485d4dc5db774a4dce5834b3576d898aec7ddfb02dd862dddda1c48523d1a25ee104086aa58803e20fded6eda69ac8c7550e5a6724eb0aa35a1b04f847cbf4b64837f65b06c5af9769ac399802682dcef7781052816f450b3da3969c3d3ed5f4a4eeffa827afd42ee9fd703dc87ae302bcc0c71c35fbcd2f9663c3a4aa4146112233197061cf5b3f70bd23906146052"}], 0x1128}, 0x40810) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@map={0x18, 0x4}, @map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc2, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0xc, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x101, 0xf, 0xfff, 0x6c8fa2ab}, 0x10, 0x6ea0}, 0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:47 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r4, r0}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x103e02, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000140)={{0x3, 0x4, 0xf829, 0x6, 'syz1\x00', 0x3}, 0x4, 0x20000d00, 0x1, 0xffffffffffffffff, 0x3, 0x8001, 'syz0\x00', &(0x7f0000000100)=['/dev/dlm-control\x00', '%\x00', '/dev/vcs\x00'], 0x1c, [], [0x383, 0xf6, 0x0, 0x81]}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x7, 0x1, &(0x7f0000000080)=0x3f}) 04:36:47 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x103e02, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000140)={{0x3, 0x4, 0xf829, 0x6, 'syz1\x00', 0x3}, 0x4, 0x20000d00, 0x1, 0xffffffffffffffff, 0x3, 0x8001, 'syz0\x00', &(0x7f0000000100)=['/dev/dlm-control\x00', '%\x00', '/dev/vcs\x00'], 0x1c, [], [0x383, 0xf6, 0x0, 0x81]}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x7, 0x1, &(0x7f0000000080)=0x3f}) 04:36:47 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x18}, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: select(0x40, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x7fff, 0x7ff, 0x9, 0xfffffffffffffff9, 0x5}, &(0x7f0000000040)={0x3, 0x1a8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5, 0x20, 0x7fffffff, 0x10001, 0x80}, &(0x7f00000001c0)={0x77359400}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) 04:36:47 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:47 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x9, 0x9, "414c7d743f049aefd694bb0c88cd30abb4e0a85aaa8879b03818b70b71f052e7663b741f64fd90bff193a6fc63a8aa6efb2bb4ba94c99f77fe90cbb08dbf38", 0x37}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="b3b0335d6107b1c03f90713df297ec44d89d2405d9c3dfb466a9fdc3520a7b5f82ec26e3e98613c4a8867d40412f1da2a53091e5782516af71fbfcb6a2217e3c19b6c188cee99e0d98baae3526dafaa30f3ec84bca3bf011a35c736cac3e0168c2bfff2abbf6dffe3059d60fc3a6acdc687f3d7116d2950da03c9c58d6aa3ee474c78cd1a0e9ca64c1beda6c0967a07c1aee773d5b", 0x95}, {&(0x7f00000002c0)="2f9b1dd3f7094ebe1d00d9e6445d2fc68e867b2d631c9f714bcde0399db6d3011e90de06df0970bb597620f8a8f8efcad537e3d656a07b43f9c46a4e46d5a07aefc9885accc662752d2becd41cc0391748dbbcafe4ade869d29551720701f0e526474b122f", 0x65}, {&(0x7f0000000340)="690ff86166904931f239ff80c3d2d819d636fd630f771e84692c15359f43b99f7e37369fcf28f36451efaace0641b70830845c043b8bb1ec5069d8285cf5f887696b6d19c5c16ce757af0a34261649026d3a129ddbd9410642737d93042b73", 0x5f}], 0x3, &(0x7f0000000400)=[{0x30, 0x117, 0x7, "1f55364d77ed04844784822c244fc032e2ce2b6d5d3bd2fc371fa4fc"}, {0x28, 0x10f, 0x8, "671bd40e85506691cfad95b3fe6e7e6bd1e8"}], 0x58}, 0x4004000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x146, 0x20, [], [@enc_lim={0x4, 0x1, 0x6}, @generic={0x7f, 0xea, "ab4d4c6248715cae60203f271a5220cf3d227ca6320b67ba910c0939a74f737beeb582d210092adb9ddaed9b84b1f457b6505196bbde2854c34c8bbaa3120e969866d5a424c23e7318614d2698af6dfd28b00cbdafaa752d6cca038b61fc79623579e8040d2894532fb627e13152598e0758aa228ef98fd44930f4d7ea5ca982a079b44faf25b966a70a50b887b0b9773ed3353475ca677867db7afef1b21e9a85e70fbb09279990762722c47d2bdbe4a48946227fa1552145c0564d482835a4570b150dee81d9f4c698b17b1b8886099bb462ad9ef63e2e1a92d51d964bc863cf98274279735db6741f"}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}]}, 0x110) 04:36:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:47 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:47 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x28001) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:47 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x40, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x6, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xe, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff162, 0x0, 0x0, 0x0, 0x84}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0xa, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x0, 0xa, 0x80, 0x4}, @exit, @exit, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x34}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001500)='GPL\x00', 0xf72, 0xe3, &(0x7f0000001540)=""/227, 0x9da8951aba6d587f, 0x11, [], r3, 0x0, r0, 0x8, &(0x7f0000001700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x5a66}, 0x78) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r4, r0}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f00000001c0)="f4ab5d8e114863962df784fe473e0562ee4ba90489f82d1d9f7d7230aaf0d3bfa0f922599b539b1a220c9b4e606cba2e6c8aa444491042fcd37b18e97d8a55076059a8dbf728473bcccd6c404c81b0546fe8df107ada5e4b9a11390cc135b83b3a59c687ae13d29900a3b83ccfd9a313366c8726094b78834648f84adf4405b62e4c96ad4ccd695831ba441eb0cece3bd94e8f9cad51e3b9afe0f6a7dfaa5f679ceeb52c12bb0c2150949aaec5d5c7019e2c4acead05183f10a192d575db3b3b72a2ad84a6186f10", &(0x7f0000001900)=""/4102, &(0x7f00000002c0)="e15257bfa9a3cf6d18cb552d7c87ef0000007b8476dce696e990f5b560e14b06f6b480cc296c520946c0f42c81f78502f61d84f8de753d611a6d3731bbcb27cac29bbdb3ae0ea1c538a459797f906a3bbf843fed6cda42bf886232521c", &(0x7f0000000480)="f9751c11d86db2c8152e1264d963abaa99a0dd53c6e62d2dca648823f852ba3014bca34d3a42d3bd4728aa1f4bbfa51d9b662decbba0d939465b402012a136e0a6a2c65daf6a0f87bc72a7f33d204f367e5a73ec50e8532d69f77fe23c1813d253f3c867dc318a2b60c1d0991b60770c622e0a987a464cf8e300f03da7bba3db06ada317e32718187d6e15dcc5937328028c67ce35a58670f27481bb41beb69e9e4fc778076ad8e1a44d5e149a2a2ec1f7df1b112f633c7646966603c49885beab245f9f55c3f1385c0d410988e55f7303a145e84ce297b11bef0924d60b7e2034083ce1786d03", 0x3ff, r5, 0x4}, 0xfffffffffffffe61) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x5}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="a10000"]) 04:36:47 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:47 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, 0x10) 04:36:48 executing program 4: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 1: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="a100"]) 04:36:48 executing program 4: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) 04:36:48 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="a100"]) 04:36:48 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="a10000"]) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="a10000"]) 04:36:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$vcs(0xffffffffffffff9c, 0x0, 0x46002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff00000001, 0x428e41) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x6000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="917a51a835d9a1150f16f6ff0db7f8a28dbab6d02ce72eabc6fd45ca97976d0fba78e52b6f1b5503dbc4549ec5a2c5366547861a296eee085e1a1825ac4a59bdae589bf3d2e11b9dff431c0e4dddae2a8741bfc42a61acf2a350728b7bbb9496749633499ec3a8af8d2e1c9070961950d435bb07bdd2ed9cb201cd0bd12d5a5944bb1795b7c27f145fdf88d76e59bcfefd699537f7e0decd2ec79b834b5a5076ff0b737cbd2d0241d7e3501ee38c78dcc4e5581197ef68e4ce83a996fcd8a17dd93d874a57753e47f6c96686cc47a778f9443fbca900b86c0a578cf1e72978a0545b277c", &(0x7f0000000140)=@udp6=r1, 0x2}, 0x20) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0x0) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:48 executing program 0: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1b5982, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x35) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket$inet_udp(0x2, 0x2, 0x0) 04:36:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 04:36:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r0}}, 0x20) 04:36:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:48 executing program 5 (fault-call:5 fault-nth:0): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000480)="46c1654c8edc07fa08ab0ae619ad7bfb21d15328b5ce07aba735a5e38d26e4a6b055a903fa9a6bdbb3ec7f013dfa87dc8c0db7b62646af3d50b75dc544374ab3c173e8d3ebadc8b691d0c48944d499901fb16926fc68fe23e208f9ad62e0680a1b5826983d39674687bfb0e9c68797e50f40fa12f58add0aa13b84cb34bec779e65bb49698f156106d96011a4467b05cac52382c48bf656c6844685ed3dab2c3037f14673c0312f4342b6b8334172b1616b0", 0xb2}], 0x1, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:49 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r0}}, 0x20) 04:36:49 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) [ 1647.091186] FAULT_INJECTION: forcing a failure. [ 1647.091186] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.125171] CPU: 0 PID: 10490 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 04:36:49 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r0}}, 0x20) 04:36:49 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0xf, 0x66}, 0x8) connect$nfc_raw(r0, 0x0, 0x35) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x1f, 0x0, 0xfff, 0x7}) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1647.133090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.142449] Call Trace: [ 1647.145051] dump_stack+0x1b2/0x281 [ 1647.148695] should_fail.cold+0x10a/0x149 [ 1647.152953] should_failslab+0xd6/0x130 [ 1647.156937] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1647.161614] loop_add+0x83/0x830 [ 1647.164991] ? loop_queue_rq+0x280/0x280 [ 1647.169049] ? loop_queue_work+0x1e80/0x1e80 [ 1647.173459] ? trace_hardirqs_on+0x10/0x10 [ 1647.177995] loop_control_ioctl+0x11a/0x3f0 [ 1647.178055] ? loop_lookup+0x190/0x190 [ 1647.178065] ? SyS_write+0x1b7/0x210 04:36:49 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1647.178075] ? loop_lookup+0x190/0x190 [ 1647.178086] do_vfs_ioctl+0x75a/0xff0 [ 1647.197700] ? ioctl_preallocate+0x1a0/0x1a0 [ 1647.197711] ? lock_downgrade+0x740/0x740 [ 1647.197725] ? __fget+0x225/0x360 [ 1647.197735] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.197746] ? security_file_ioctl+0x83/0xb0 [ 1647.197758] SyS_ioctl+0x7f/0xb0 [ 1647.197766] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.197778] do_syscall_64+0x1d5/0x640 [ 1647.197797] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1647.197805] RIP: 0033:0x45e219 04:36:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, 0x0, 0xfffffffffffffc52) 04:36:49 executing program 5 (fault-call:5 fault-nth:1): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:49 executing program 4: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x9db) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x35) 04:36:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x10e, 0x0, [], [@ra={0x5, 0x2, 0xfc01}]}}}], 0x1d8}, 0x1) 04:36:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, 0x0, 0xfffffffffffffc52) [ 1647.197813] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.245368] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1647.252640] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.259908] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.267181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.274457] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:49 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x9) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000080)=""/127) connect$nfc_raw(r1, 0x0, 0x35) connect$nfc_raw(r0, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x2}, 0x10) 04:36:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:49 executing program 5 (fault-call:5 fault-nth:2): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, 0x0, 0xfffffffffffffc52) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) [ 1647.361985] FAULT_INJECTION: forcing a failure. [ 1647.361985] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.375285] CPU: 0 PID: 10528 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 04:36:49 executing program 5 (fault-call:5 fault-nth:3): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) [ 1647.375292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1647.375296] Call Trace: [ 1647.375314] dump_stack+0x1b2/0x281 [ 1647.375328] should_fail.cold+0x10a/0x149 [ 1647.375343] should_failslab+0xd6/0x130 [ 1647.375357] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1647.375370] __kmalloc_node+0x38/0x70 [ 1647.375381] blk_mq_alloc_tag_set+0x27c/0x910 [ 1647.375398] loop_add+0x2a0/0x830 [ 1647.375411] ? loop_queue_rq+0x280/0x280 [ 1647.375419] ? loop_queue_work+0x1e80/0x1e80 [ 1647.375430] ? trace_hardirqs_on+0x10/0x10 [ 1647.375440] loop_control_ioctl+0x11a/0x3f0 [ 1647.375449] ? loop_lookup+0x190/0x190 [ 1647.375458] ? SyS_write+0x1b7/0x210 [ 1647.375470] ? loop_lookup+0x190/0x190 [ 1647.375480] do_vfs_ioctl+0x75a/0xff0 [ 1647.375491] ? ioctl_preallocate+0x1a0/0x1a0 [ 1647.375500] ? lock_downgrade+0x740/0x740 [ 1647.375513] ? __fget+0x225/0x360 [ 1647.375522] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.375532] ? security_file_ioctl+0x83/0xb0 [ 1647.375543] SyS_ioctl+0x7f/0xb0 [ 1647.375551] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.375562] do_syscall_64+0x1d5/0x640 [ 1647.375578] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1647.375586] RIP: 0033:0x45e219 [ 1647.375591] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.375601] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1647.375606] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.375612] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.375617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.375623] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1647.428561] FAULT_INJECTION: forcing a failure. [ 1647.428561] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.428573] CPU: 0 PID: 10536 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1647.428578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.428582] Call Trace: [ 1647.428597] dump_stack+0x1b2/0x281 [ 1647.428610] should_fail.cold+0x10a/0x149 [ 1647.428624] should_failslab+0xd6/0x130 [ 1647.428638] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1647.428653] __kmalloc_node+0x38/0x70 [ 1647.428666] blk_mq_alloc_tag_set+0x30f/0x910 [ 1647.428682] loop_add+0x2a0/0x830 [ 1647.428694] ? loop_queue_rq+0x280/0x280 [ 1647.428702] ? loop_queue_work+0x1e80/0x1e80 [ 1647.428713] ? trace_hardirqs_on+0x10/0x10 [ 1647.428724] loop_control_ioctl+0x11a/0x3f0 [ 1647.428733] ? loop_lookup+0x190/0x190 [ 1647.428741] ? SyS_write+0x1b7/0x210 [ 1647.428753] ? loop_lookup+0x190/0x190 [ 1647.428763] do_vfs_ioctl+0x75a/0xff0 [ 1647.428775] ? ioctl_preallocate+0x1a0/0x1a0 [ 1647.428784] ? lock_downgrade+0x740/0x740 [ 1647.428798] ? __fget+0x225/0x360 [ 1647.428808] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.428818] ? security_file_ioctl+0x83/0xb0 [ 1647.428829] SyS_ioctl+0x7f/0xb0 [ 1647.428836] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.428848] do_syscall_64+0x1d5/0x640 [ 1647.428864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1647.428872] RIP: 0033:0x45e219 [ 1647.428877] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.428888] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1647.428894] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.428899] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.428904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.428910] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1647.466243] FAULT_INJECTION: forcing a failure. [ 1647.466243] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.466254] CPU: 0 PID: 10546 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1647.466260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.466264] Call Trace: [ 1647.466279] dump_stack+0x1b2/0x281 [ 1647.466292] should_fail.cold+0x10a/0x149 [ 1647.466307] should_failslab+0xd6/0x130 [ 1647.466320] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1647.466336] blk_mq_init_tags+0x5e/0x280 [ 1647.466349] blk_mq_alloc_rq_map+0x90/0x220 [ 1647.466361] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1647.466374] blk_mq_alloc_tag_set+0x4ac/0x910 [ 1647.466388] loop_add+0x2a0/0x830 [ 1647.466400] ? loop_queue_rq+0x280/0x280 [ 1647.466407] ? loop_queue_work+0x1e80/0x1e80 [ 1647.466418] ? trace_hardirqs_on+0x10/0x10 [ 1647.466430] loop_control_ioctl+0x11a/0x3f0 [ 1647.466438] ? loop_lookup+0x190/0x190 [ 1647.466447] ? SyS_write+0x1b7/0x210 [ 1647.466459] ? loop_lookup+0x190/0x190 [ 1647.466469] do_vfs_ioctl+0x75a/0xff0 [ 1647.466481] ? ioctl_preallocate+0x1a0/0x1a0 [ 1647.466490] ? lock_downgrade+0x740/0x740 [ 1647.466503] ? __fget+0x225/0x360 [ 1647.466513] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.466528] ? security_file_ioctl+0x83/0xb0 [ 1647.466539] SyS_ioctl+0x7f/0xb0 [ 1647.466547] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.466558] do_syscall_64+0x1d5/0x640 [ 1647.466574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1647.466582] RIP: 0033:0x45e219 [ 1647.466587] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.466597] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1647.466603] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.466608] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 04:36:49 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0xff, 0x81, 0x4a, @mcast1, @private0={0xfc, 0x0, [], 0x1}, 0x7800, 0x7, 0xffff, 0x10000}}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$nfc_raw(r0, 0x0, 0x0) 04:36:49 executing program 5 (fault-call:5 fault-nth:4): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x1b8}, 0x1) 04:36:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, 0x0, 0xfffffffffffffc52) [ 1647.466614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1647.466619] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1647.468127] blk-mq: reduced tag depth (128 -> 64) 04:36:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, 0x0, 0xfffffffffffffc52) 04:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x1a0}, 0x1) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0x7f, 0x0, [@loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00', @remote, @private0, @private0]}}}], 0x188}, 0x1) [ 1648.142245] FAULT_INJECTION: forcing a failure. [ 1648.142245] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.184629] CPU: 0 PID: 10573 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1648.192548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.201898] Call Trace: [ 1648.204489] dump_stack+0x1b2/0x281 [ 1648.208128] should_fail.cold+0x10a/0x149 [ 1648.212289] should_failslab+0xd6/0x130 [ 1648.216273] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1648.221397] __kmalloc_node+0x38/0x70 [ 1648.221410] sbitmap_init_node+0x10c/0x3d0 [ 1648.229441] sbitmap_queue_init_node+0x37/0x5d0 [ 1648.234117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1648.239147] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1648.244459] blk_mq_init_tags+0xf4/0x280 [ 1648.248523] blk_mq_alloc_rq_map+0x90/0x220 [ 1648.252848] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1648.257347] blk_mq_alloc_tag_set+0x4ac/0x910 [ 1648.261842] loop_add+0x2a0/0x830 [ 1648.265295] ? loop_queue_rq+0x280/0x280 [ 1648.269351] ? loop_queue_work+0x1e80/0x1e80 [ 1648.273761] ? trace_hardirqs_on+0x10/0x10 [ 1648.278000] loop_control_ioctl+0x11a/0x3f0 04:36:50 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="70a7f052495246b9acd709b3a6d072b238c23b918d984998089a7c723c197347dbb8842cc6d1df1a1bf554dc255b1197a9b47bd99a8790a933f5d51900c97ca4d2b6c0534faeaa642e70803d8b0b6bd24ada555c7d03f291842697a79465d2d7b1b22d84e7a350a9e9278116192be44d0ed66e4b78bd28cfef6dea5a3041b5f0e4e11de0ba9c35661fc6d8d021c30f4f416b1b69f0951bbe30c043", 0x9b) connect$nfc_raw(r0, 0x0, 0x35) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) [ 1648.282322] ? loop_lookup+0x190/0x190 [ 1648.286210] ? SyS_write+0x1b7/0x210 [ 1648.289925] ? loop_lookup+0x190/0x190 [ 1648.293803] do_vfs_ioctl+0x75a/0xff0 [ 1648.297588] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.301991] ? lock_downgrade+0x740/0x740 [ 1648.306136] ? __fget+0x225/0x360 [ 1648.309583] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.313549] ? security_file_ioctl+0x83/0xb0 [ 1648.317936] SyS_ioctl+0x7f/0xb0 [ 1648.321290] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.325244] do_syscall_64+0x1d5/0x640 [ 1648.329115] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.334281] RIP: 0033:0x45e219 [ 1648.337445] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.345142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1648.352401] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1648.359766] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.367024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1648.374291] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:50 executing program 5 (fault-call:5 fault-nth:5): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xf0}, 0x1) 04:36:50 executing program 4: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) prctl$PR_SVE_GET_VL(0x33, 0x1f0c7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:36:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, 0x0, 0xfffffffffffffc52) [ 1648.390755] blk-mq: reduced tag depth (128 -> 64) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0xc8}, 0x1) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:36:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0xfffffffffffffc52) 04:36:50 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8900, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0xfffffffffffffc52) [ 1648.522472] FAULT_INJECTION: forcing a failure. [ 1648.522472] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.550600] CPU: 1 PID: 10643 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1648.558520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.558525] Call Trace: 04:36:50 executing program 5 (fault-call:5 fault-nth:6): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x62, 0x9, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf3, 0x400, [0x0, 0x6, 0x81, 0x3]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}]}}}], 0xb0}, 0x1) 04:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:50 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1648.558543] dump_stack+0x1b2/0x281 [ 1648.558557] should_fail.cold+0x10a/0x149 [ 1648.558571] should_failslab+0xd6/0x130 [ 1648.558591] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1648.558608] sbitmap_queue_init_node+0x27f/0x5d0 04:36:50 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}], 0x48}, 0x1) 04:36:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) [ 1648.558621] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1648.558633] blk_mq_init_tags+0xf4/0x280 [ 1648.558646] blk_mq_alloc_rq_map+0x90/0x220 [ 1648.558657] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1648.558669] blk_mq_alloc_tag_set+0x4ac/0x910 04:36:50 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x82280) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="9d1031afd9936dc4cc8fc4843398394e6bc79ef214dfe501cb9bb13db7c3a9210b9fa292192d705d0a1b27af247856413f3c5a88b2cf1fb0d9660eafa8c51fe4acd77aa99ed84d1e7e0571f938b048990c3d0243bc138a10a501b4503c30ae0757bd03cdc048347326cf692bc9a384d1595cf9b3e764d563f466a0ed207c4e57dec48bbeff509bf0af2e0f1b876b0b8973fe", 0x92}, {&(0x7f0000000180)="fced1ecb47482ea8576828de95162d1eee20e999f285b50b96ce3c1204ad7655f09db288e7e0c12a8ff8c5fc96864e4d37c3ed30814b7fc7f7b39a8e045dc43f65b73e0e35f2a17ad85291e7898f1cb1bf7755865bb831d9b893", 0x5a}], 0x2, &(0x7f0000000240)="3e0813e78d596c562d08ce7b4d0b62504dbc0fc00a36cf9a002f3e9a32d67c432af60a4736136ad40846ae4f627769f869809e3ff65a093f14fc2f7753a60a9ab6b4f45891ac1f22e76570059f1ff63e7d6769b6da2ab422ce741ee7ef14354674881d415ae88d5b2841a4afa5e1701b6fd5e26a9d5d92102232e2624598da6a11c2223b1a5a3ad14036793ec37df23df8653f60ed57269f7d9a7f0e4538e3a40fa218774719e8d85d02780f8f623143f96c6df02d02e3e7fc119ddb995b7e", 0xbf, 0x24040004}, 0x40) r1 = syz_init_net_socket$nfc_raw(0x27, 0xa2e5162218880d4c, 0x0) connect$nfc_raw(r1, 0x0, 0x35) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="3e226d9a956dff0dfc6e4d61252dd6f5b2be51e43adca03b23dc094e35e7d549e7e6135eb725cf83d4ed629b25dc6a050ed1add763ddc85c6c790cb04954ab6132dbe3257bfd883ffc476541bba2edb4110c39fefe81c8f0ac9fd4c625fe37b08b387744a8", 0x65}], 0x1, &(0x7f0000000540)=[{0x108, 0xf2, 0x4, "fc3aff56bac001a93c63b54f9598eba4e006ba692a0d9198f39dc469161f0af5a16a6b6249396b48e964ad6d0d2a39e7ec8e22766255b8de34ad4059be0d47b54d967a30c1b8ce37879456e9d944224476177a692c9dd440f4636ed22b98e98d9045c7651419191d63950c880f6d5546ad41b6e4bd589e8fd0d5ac17daa5667571bc74833b6652265816a5d3e1d343806aecffc0b816d3aeffb530c9088ce286fc0ae2015a26beff89180772d9b1c384e1ada8d7ed6cedacc12ba11dd74315f860849d55afb450176e9f5ab96f470795f4c15aaf74506e5662ae54af8f62b5f5a3b4883f4cdcac2791f68680ef3b09e12fb39a"}, {0x60, 0x10d, 0x5, "502298bb81317a78af6f94e7d5895411afb22466d0747aa859b10acb05c3b24c77848d36b27a2091026193fda5505fd9abc61fcbd58b223a591b21758e3b60d95db29fadee16804c2bdbe04df842"}, {0x10, 0xff, 0xbfe2}, {0x68, 0x84, 0x4, "96da951d9d79a515787541c7caaa0df4530d873a50df0b15653766e05c91777bae2208dea59adc16f00443493b0dc3e7882b755830da4fc70aced9cc73088f5b81d058e525a273264ac2e5ef9725aef50fb109"}], 0x1e0}, 0x8000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x3ff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r2, r0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000340)={0x73f, 0x1c, [0x3f, 0x80000000, 0x100, 0x6, 0x26, 0x2, 0x400]}) [ 1648.558683] loop_add+0x2a0/0x830 [ 1648.558695] ? loop_queue_rq+0x280/0x280 [ 1648.558702] ? loop_queue_work+0x1e80/0x1e80 [ 1648.558714] ? trace_hardirqs_on+0x10/0x10 04:36:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1648.558724] loop_control_ioctl+0x11a/0x3f0 [ 1648.558733] ? loop_lookup+0x190/0x190 [ 1648.558741] ? SyS_write+0x1b7/0x210 [ 1648.558752] ? loop_lookup+0x190/0x190 [ 1648.558761] do_vfs_ioctl+0x75a/0xff0 [ 1648.558770] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.558777] ? lock_downgrade+0x740/0x740 [ 1648.558790] ? __fget+0x225/0x360 [ 1648.558799] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.558808] ? security_file_ioctl+0x83/0xb0 [ 1648.558838] SyS_ioctl+0x7f/0xb0 [ 1648.558846] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.558855] do_syscall_64+0x1d5/0x640 [ 1648.558867] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.558874] RIP: 0033:0x45e219 [ 1648.558879] RSP: 002b:00007fb2e3616c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.558887] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1648.558892] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1648.558896] RBP: 00007fb2e3616ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.558900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1648.558905] R13: 00007ffcdea25b5f R14: 00007fb2e36179c0 R15: 000000000119c034 [ 1648.576155] blk-mq: reduced tag depth (128 -> 64) [ 1648.694104] FAULT_INJECTION: forcing a failure. [ 1648.694104] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.694115] CPU: 0 PID: 10661 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1648.694121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.694125] Call Trace: [ 1648.694140] dump_stack+0x1b2/0x281 [ 1648.694153] should_fail.cold+0x10a/0x149 [ 1648.694167] should_failslab+0xd6/0x130 [ 1648.694182] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1648.694196] sbitmap_queue_init_node+0x27f/0x5d0 [ 1648.694210] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1648.694223] blk_mq_init_tags+0x14b/0x280 [ 1648.694235] blk_mq_alloc_rq_map+0x90/0x220 [ 1648.694247] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1648.694259] blk_mq_alloc_tag_set+0x4ac/0x910 [ 1648.694274] loop_add+0x2a0/0x830 [ 1648.694286] ? loop_queue_rq+0x280/0x280 [ 1648.694294] ? loop_queue_work+0x1e80/0x1e80 [ 1648.694305] ? trace_hardirqs_on+0x10/0x10 [ 1648.694317] loop_control_ioctl+0x11a/0x3f0 [ 1648.694325] ? loop_lookup+0x190/0x190 [ 1648.694334] ? SyS_write+0x1b7/0x210 [ 1648.694346] ? loop_lookup+0x190/0x190 [ 1648.694356] do_vfs_ioctl+0x75a/0xff0 [ 1648.694367] ? ioctl_preallocate+0x1a0/0x1a0 [ 1648.694376] ? lock_downgrade+0x740/0x740 [ 1648.694389] ? __fget+0x225/0x360 [ 1648.694398] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.694409] ? security_file_ioctl+0x83/0xb0 [ 1648.694419] SyS_ioctl+0x7f/0xb0 [ 1648.694426] ? do_vfs_ioctl+0xff0/0xff0 [ 1648.694438] do_syscall_64+0x1d5/0x640 [ 1648.694454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1648.694462] RIP: 0033:0x45e219 [ 1648.694467] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.694477] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 04:36:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0xfffffffffffffc52) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:51 executing program 5 (fault-call:5 fault-nth:7): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1648.694483] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1648.694488] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.694493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1648.694499] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1648.694633] blk-mq: reduced tag depth (128 -> 64) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0xfffffffffffffc52) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:51 executing program 4: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1649.160450] FAULT_INJECTION: forcing a failure. [ 1649.160450] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.188558] CPU: 1 PID: 10698 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1649.196473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.205823] Call Trace: 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1fcdb28bf24e5345aa8a950bf353aaffbdacec5ded7ea36b2d103a3d0f2b9880366834166f3d8c79", 0x28, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) [ 1649.208432] dump_stack+0x1b2/0x281 [ 1649.212071] should_fail.cold+0x10a/0x149 [ 1649.216223] should_failslab+0xd6/0x130 [ 1649.220202] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1649.225330] __kmalloc_node+0x38/0x70 [ 1649.225344] blk_mq_alloc_rq_map+0xd2/0x220 [ 1649.225356] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1649.225368] blk_mq_alloc_tag_set+0x4ac/0x910 04:36:51 executing program 5 (fault-call:5 fault-nth:8): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) 04:36:51 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/85) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2022, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffffff, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x5, 0x4}, 0xc) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x1, 0x2}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [], [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}], 0x48}, 0x1) [ 1649.225384] loop_add+0x2a0/0x830 [ 1649.225396] ? loop_queue_rq+0x280/0x280 [ 1649.225403] ? loop_queue_work+0x1e80/0x1e80 [ 1649.225415] ? trace_hardirqs_on+0x10/0x10 [ 1649.225426] loop_control_ioctl+0x11a/0x3f0 [ 1649.225434] ? loop_lookup+0x190/0x190 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c) [ 1649.225443] ? SyS_write+0x1b7/0x210 [ 1649.225454] ? loop_lookup+0x190/0x190 [ 1649.225464] do_vfs_ioctl+0x75a/0xff0 [ 1649.225476] ? ioctl_preallocate+0x1a0/0x1a0 [ 1649.225484] ? lock_downgrade+0x740/0x740 [ 1649.225498] ? __fget+0x225/0x360 [ 1649.225507] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.225517] ? security_file_ioctl+0x83/0xb0 [ 1649.225527] SyS_ioctl+0x7f/0xb0 [ 1649.225535] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.225546] do_syscall_64+0x1d5/0x640 [ 1649.225563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1649.225571] RIP: 0033:0x45e219 [ 1649.225576] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.225586] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1649.225591] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1649.225596] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.225600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1649.225605] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1649.243919] blk-mq: reduced tag depth (128 -> 64) [ 1649.440951] FAULT_INJECTION: forcing a failure. [ 1649.440951] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.440964] CPU: 0 PID: 10750 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1649.440971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.440974] Call Trace: [ 1649.440990] dump_stack+0x1b2/0x281 [ 1649.441004] should_fail.cold+0x10a/0x149 [ 1649.441017] should_failslab+0xd6/0x130 [ 1649.441031] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1649.441046] __kmalloc_node+0x38/0x70 [ 1649.441056] blk_mq_alloc_rq_map+0x113/0x220 [ 1649.441067] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1649.441078] blk_mq_alloc_tag_set+0x4ac/0x910 [ 1649.441092] loop_add+0x2a0/0x830 [ 1649.441103] ? loop_queue_rq+0x280/0x280 [ 1649.441110] ? loop_queue_work+0x1e80/0x1e80 [ 1649.441121] ? trace_hardirqs_on+0x10/0x10 [ 1649.441133] loop_control_ioctl+0x11a/0x3f0 [ 1649.441141] ? loop_lookup+0x190/0x190 [ 1649.441149] ? SyS_write+0x1b7/0x210 [ 1649.441160] ? loop_lookup+0x190/0x190 [ 1649.441170] do_vfs_ioctl+0x75a/0xff0 [ 1649.441181] ? ioctl_preallocate+0x1a0/0x1a0 [ 1649.441189] ? lock_downgrade+0x740/0x740 [ 1649.441201] ? __fget+0x225/0x360 [ 1649.441211] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.441222] ? security_file_ioctl+0x83/0xb0 [ 1649.441232] SyS_ioctl+0x7f/0xb0 [ 1649.441239] ? do_vfs_ioctl+0xff0/0xff0 [ 1649.441250] do_syscall_64+0x1d5/0x640 [ 1649.441266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1649.441273] RIP: 0033:0x45e219 [ 1649.441278] RSP: 002b:00007fb2e3616c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0xfffffffffffffc52) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, [], [@pad1]}}}], 0x38}, 0x1) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c) 04:36:51 executing program 5 (fault-call:5 fault-nth:9): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1649.441289] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1649.441294] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1649.441300] RBP: 00007fb2e3616ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.441305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1649.441312] R13: 00007ffcdea25b5f R14: 00007fb2e36179c0 R15: 000000000119c034 [ 1649.441461] blk-mq: reduced tag depth (128 -> 64) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x20040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x2607, 0x3f, 0x6, 0x4, [], [], [], 0x81, 0x200000, 0x7f, 0x2, "c0c8f700bb8979e762a77d1787c52e6c"}) connect$nfc_raw(r0, 0x0, 0x35) 04:36:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x1) 04:36:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0xfffffffffffffc52) 04:36:51 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x270400, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) connect$nfc_raw(r0, 0x0, 0x35) 04:36:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) 04:36:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0xfffffffffffffc52) 04:36:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) [ 1649.795475] FAULT_INJECTION: forcing a failure. [ 1649.795475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:36:51 executing program 4: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1649.875829] CPU: 0 PID: 10767 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1649.883746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.893097] Call Trace: [ 1649.895695] dump_stack+0x1b2/0x281 [ 1649.899328] should_fail.cold+0x10a/0x149 [ 1649.903480] __alloc_pages_nodemask+0x22c/0x2720 [ 1649.908238] ? kasan_kmalloc+0xeb/0x160 [ 1649.912214] ? blk_mq_alloc_rq_map+0x113/0x220 [ 1649.916792] ? __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 1649.921454] ? loop_add+0x2a0/0x830 [ 1649.925076] ? loop_control_ioctl+0x11a/0x3f0 [ 1649.929573] ? do_vfs_ioctl+0x75a/0xff0 [ 1649.933565] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1649.938908] ? __mutex_unlock_slowpath+0x75/0x770 [ 1649.943731] ? fs_reclaim_release+0xd0/0x110 [ 1649.948119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1649.952942] ? __lockdep_init_map+0x100/0x560 [ 1649.957432] ? _find_next_bit+0xdb/0x100 [ 1649.961479] ? __cpu_to_node+0x7b/0xa0 [ 1649.965346] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 1649.970081] blk_mq_alloc_rqs+0x227/0x6d0 [ 1649.974209] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 1649.978694] __blk_mq_alloc_rq_map+0x15b/0x3a0 [ 1649.983254] blk_mq_alloc_tag_set+0x4ac/0x910 [ 1649.987747] loop_add+0x2a0/0x830 [ 1649.991178] ? loop_queue_rq+0x280/0x280 [ 1649.995228] ? loop_queue_work+0x1e80/0x1e80 [ 1649.999614] ? trace_hardirqs_on+0x10/0x10 [ 1650.003827] loop_control_ioctl+0x11a/0x3f0 [ 1650.008134] ? loop_lookup+0x190/0x190 [ 1650.012008] ? SyS_write+0x1b7/0x210 [ 1650.015715] ? loop_lookup+0x190/0x190 [ 1650.019683] do_vfs_ioctl+0x75a/0xff0 [ 1650.023644] ? ioctl_preallocate+0x1a0/0x1a0 [ 1650.028660] ? lock_downgrade+0x740/0x740 [ 1650.032890] ? __fget+0x225/0x360 [ 1650.036659] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.040711] ? security_file_ioctl+0x83/0xb0 [ 1650.045105] SyS_ioctl+0x7f/0xb0 [ 1650.048453] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.052409] do_syscall_64+0x1d5/0x640 [ 1650.056284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1650.061454] RIP: 0033:0x45e219 [ 1650.064626] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:52 executing program 5 (fault-call:5 fault-nth:10): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1000, 0x2000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000001c0)={0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/208) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x4}, 0x10) connect$nfc_raw(r1, 0x0, 0x35) 04:36:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) 04:36:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 04:36:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:52 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffc52) [ 1650.072315] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1650.079565] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.086814] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.094062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1650.101311] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) 04:36:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:52 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x408040, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffce2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1cd0c1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x4a0, 0x80, &(0x7f0000000040)=0x1}) 04:36:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1000, 0x2000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000001c0)={0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/208) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x4}, 0x10) connect$nfc_raw(r1, 0x0, 0x35) [ 1650.241484] FAULT_INJECTION: forcing a failure. [ 1650.241484] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.264610] CPU: 1 PID: 10815 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1650.272566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.281918] Call Trace: [ 1650.284513] dump_stack+0x1b2/0x281 [ 1650.288146] should_fail.cold+0x10a/0x149 [ 1650.292297] should_failslab+0xd6/0x130 [ 1650.296367] kmem_cache_alloc_node+0x263/0x410 [ 1650.300960] blk_alloc_queue_node+0x2d/0xb40 [ 1650.305368] blk_mq_init_queue+0x42/0x90 [ 1650.309413] loop_add+0x303/0x830 [ 1650.312862] ? loop_queue_rq+0x280/0x280 [ 1650.316918] ? loop_queue_work+0x1e80/0x1e80 [ 1650.321328] ? trace_hardirqs_on+0x10/0x10 [ 1650.326093] loop_control_ioctl+0x11a/0x3f0 [ 1650.330408] ? loop_lookup+0x190/0x190 [ 1650.334375] ? SyS_write+0x1b7/0x210 [ 1650.338080] ? loop_lookup+0x190/0x190 [ 1650.341957] do_vfs_ioctl+0x75a/0xff0 [ 1650.345750] ? ioctl_preallocate+0x1a0/0x1a0 [ 1650.350203] ? lock_downgrade+0x740/0x740 [ 1650.354364] ? __fget+0x225/0x360 [ 1650.357811] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.361773] ? security_file_ioctl+0x83/0xb0 [ 1650.366169] SyS_ioctl+0x7f/0xb0 [ 1650.369526] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.373481] do_syscall_64+0x1d5/0x640 [ 1650.377365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1650.382542] RIP: 0033:0x45e219 04:36:52 executing program 5 (fault-call:5 fault-nth:11): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:52 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:52 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x101100) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x8, 0x6, 0x7ff, 0x7fffffff, 'syz1\x00', 0x1000}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)={0x32, 0x5, [], [@hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xe}}, @padn={0x1, 0x1, [0x0]}]}, 0x38) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000140)={0xffffe99e, 0x4, [0x80000000]}) 04:36:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1650.385716] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.393416] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1650.400669] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.407924] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.415182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1650.422432] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1650.492034] FAULT_INJECTION: forcing a failure. [ 1650.492034] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.509931] CPU: 1 PID: 10840 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1650.517949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.527302] Call Trace: [ 1650.529921] dump_stack+0x1b2/0x281 [ 1650.533653] should_fail.cold+0x10a/0x149 [ 1650.537810] should_failslab+0xd6/0x130 04:36:52 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f00000002c0)=[@decrefs, @exit_looper, @free_buffer={0x40086303, r2}, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/203, 0xcb, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/111, 0x6f, 0x0, 0x2e}, @flat=@weak_handle={0x77682a85, 0x1, 0x3}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @exit_looper], 0x13, 0x0, &(0x7f0000000340)="b903b3479d7e8175cc8f6b621d28b785ffa7e1"}) connect$nfc_raw(r0, 0x0, 0x35) 04:36:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:52 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) [ 1650.541790] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1650.546466] bioset_create+0x53/0x750 [ 1650.550267] ? kmem_cache_alloc_node+0x38b/0x410 [ 1650.555031] blk_alloc_queue_node+0xa8/0xb40 [ 1650.559449] blk_mq_init_queue+0x42/0x90 [ 1650.563509] loop_add+0x303/0x830 [ 1650.566963] ? loop_queue_rq+0x280/0x280 [ 1650.571015] ? loop_queue_work+0x1e80/0x1e80 [ 1650.575518] ? trace_hardirqs_on+0x10/0x10 [ 1650.579760] loop_control_ioctl+0x11a/0x3f0 [ 1650.584080] ? loop_lookup+0x190/0x190 [ 1650.587964] ? SyS_write+0x1b7/0x210 04:36:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1650.591686] ? loop_lookup+0x190/0x190 [ 1650.591697] do_vfs_ioctl+0x75a/0xff0 [ 1650.591709] ? ioctl_preallocate+0x1a0/0x1a0 [ 1650.591719] ? lock_downgrade+0x740/0x740 04:36:52 executing program 5 (fault-call:5 fault-nth:12): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) 04:36:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) 04:36:52 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1650.591733] ? __fget+0x225/0x360 [ 1650.591742] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.591753] ? security_file_ioctl+0x83/0xb0 [ 1650.591763] SyS_ioctl+0x7f/0xb0 04:36:52 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, 0x0, 0xfffffffffffffc52) [ 1650.591770] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.591781] do_syscall_64+0x1d5/0x640 [ 1650.591797] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1650.591805] RIP: 0033:0x45e219 [ 1650.591810] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.591821] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1650.591826] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.591831] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.591835] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1650.591841] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1650.670208] FAULT_INJECTION: forcing a failure. [ 1650.670208] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.670220] CPU: 1 PID: 10870 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1650.670226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.670229] Call Trace: [ 1650.670245] dump_stack+0x1b2/0x281 [ 1650.670258] should_fail.cold+0x10a/0x149 [ 1650.670271] should_failslab+0xd6/0x130 [ 1650.670287] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1650.670298] ? mempool_free+0x1d0/0x1d0 [ 1650.670309] mempool_create_node+0x76/0x3e0 [ 1650.670318] ? mempool_kmalloc+0x20/0x20 [ 1650.670332] bioset_create+0x31b/0x750 [ 1650.670342] ? kmem_cache_alloc_node+0x38b/0x410 [ 1650.670356] blk_alloc_queue_node+0xa8/0xb40 [ 1650.670369] blk_mq_init_queue+0x42/0x90 [ 1650.670379] loop_add+0x303/0x830 [ 1650.670391] ? loop_queue_rq+0x280/0x280 [ 1650.670398] ? loop_queue_work+0x1e80/0x1e80 [ 1650.670409] ? trace_hardirqs_on+0x10/0x10 [ 1650.670421] loop_control_ioctl+0x11a/0x3f0 [ 1650.670429] ? loop_lookup+0x190/0x190 [ 1650.670447] ? SyS_write+0x1b7/0x210 [ 1650.670461] ? loop_lookup+0x190/0x190 [ 1650.670472] do_vfs_ioctl+0x75a/0xff0 [ 1650.670485] ? ioctl_preallocate+0x1a0/0x1a0 [ 1650.670494] ? lock_downgrade+0x740/0x740 [ 1650.670509] ? __fget+0x225/0x360 [ 1650.670519] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.670530] ? security_file_ioctl+0x83/0xb0 [ 1650.670541] SyS_ioctl+0x7f/0xb0 [ 1650.670549] ? do_vfs_ioctl+0xff0/0xff0 [ 1650.670560] do_syscall_64+0x1d5/0x640 [ 1650.670577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1650.670584] RIP: 0033:0x45e219 [ 1650.670590] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.670600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1650.670606] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.670612] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.670617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1650.670623] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:52 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="28c11818c99553b9f63506ebdf0ef4", 0xf}], 0x1, 0x0, 0x0, 0x4000}, 0x8000) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x2}, 0x10) connect$nfc_raw(r0, 0x0, 0x35) 04:36:52 executing program 5 (fault-call:5 fault-nth:13): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:52 executing program 0: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev, 0x6}, 0x1c) 04:36:52 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/85) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2022, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffffff, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x5, 0x4}, 0xc) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x1, 0x2}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) 04:36:52 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0xfffffffffffffc52) 04:36:52 executing program 0: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x300, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x0) [ 1651.046439] FAULT_INJECTION: forcing a failure. [ 1651.046439] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.073146] CPU: 0 PID: 10890 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1651.081183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.090542] Call Trace: [ 1651.093139] dump_stack+0x1b2/0x281 04:36:53 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0xfffffffffffffc52) 04:36:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1fcdb28bf24e5345aa8a950bf353aaffbdacec5ded7ea36b2d103a3d0f2b9880366834166f3d8c79", 0x28, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:36:53 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/85) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2022, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffffff, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x5, 0x4}, 0xc) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x1, 0x2}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) 04:36:53 executing program 0: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1651.096785] should_fail.cold+0x10a/0x149 [ 1651.096801] should_failslab+0xd6/0x130 [ 1651.096814] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1651.096826] ? mempool_free+0x1d0/0x1d0 [ 1651.096837] __kmalloc_node+0x38/0x70 04:36:53 executing program 5 (fault-call:5 fault-nth:14): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1651.096848] mempool_create_node+0xb1/0x3e0 [ 1651.096857] ? mempool_kmalloc+0x20/0x20 [ 1651.096870] bioset_create+0x31b/0x750 [ 1651.096879] ? kmem_cache_alloc_node+0x38b/0x410 [ 1651.096892] blk_alloc_queue_node+0xa8/0xb40 04:36:53 executing program 5 (fault-call:5 fault-nth:15): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1651.096905] blk_mq_init_queue+0x42/0x90 [ 1651.096915] loop_add+0x303/0x830 [ 1651.096928] ? loop_queue_rq+0x280/0x280 [ 1651.096936] ? loop_queue_work+0x1e80/0x1e80 [ 1651.096947] ? trace_hardirqs_on+0x10/0x10 [ 1651.096960] loop_control_ioctl+0x11a/0x3f0 [ 1651.096969] ? loop_lookup+0x190/0x190 [ 1651.096978] ? SyS_write+0x1b7/0x210 [ 1651.096990] ? loop_lookup+0x190/0x190 [ 1651.097000] do_vfs_ioctl+0x75a/0xff0 [ 1651.097012] ? ioctl_preallocate+0x1a0/0x1a0 [ 1651.097021] ? lock_downgrade+0x740/0x740 [ 1651.097044] ? __fget+0x225/0x360 [ 1651.097054] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.097065] ? security_file_ioctl+0x83/0xb0 [ 1651.097076] SyS_ioctl+0x7f/0xb0 [ 1651.097084] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.097096] do_syscall_64+0x1d5/0x640 [ 1651.097120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1651.097129] RIP: 0033:0x45e219 [ 1651.097134] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.097145] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1651.097150] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.097156] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.097162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 1651.097167] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1651.215293] FAULT_INJECTION: forcing a failure. [ 1651.215293] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.215304] CPU: 1 PID: 10912 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1651.215310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.215313] Call Trace: [ 1651.215328] dump_stack+0x1b2/0x281 [ 1651.215351] should_fail.cold+0x10a/0x149 [ 1651.215367] should_failslab+0xd6/0x130 [ 1651.215380] kmem_cache_alloc+0x28e/0x3c0 [ 1651.215391] ? mempool_free+0x1d0/0x1d0 [ 1651.215402] mempool_create_node+0x2d2/0x3e0 [ 1651.215416] bioset_create+0x31b/0x750 [ 1651.215425] ? kmem_cache_alloc_node+0x38b/0x410 [ 1651.215445] blk_alloc_queue_node+0xa8/0xb40 [ 1651.215457] blk_mq_init_queue+0x42/0x90 [ 1651.215466] loop_add+0x303/0x830 [ 1651.215478] ? loop_queue_rq+0x280/0x280 [ 1651.215484] ? loop_queue_work+0x1e80/0x1e80 [ 1651.215494] ? trace_hardirqs_on+0x10/0x10 [ 1651.215504] loop_control_ioctl+0x11a/0x3f0 [ 1651.215512] ? loop_lookup+0x190/0x190 [ 1651.215520] ? SyS_write+0x1b7/0x210 [ 1651.215531] ? loop_lookup+0x190/0x190 [ 1651.215542] do_vfs_ioctl+0x75a/0xff0 [ 1651.215557] ? ioctl_preallocate+0x1a0/0x1a0 [ 1651.215567] ? lock_downgrade+0x740/0x740 [ 1651.215583] ? __fget+0x225/0x360 [ 1651.215592] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.215602] ? security_file_ioctl+0x83/0xb0 [ 1651.215613] SyS_ioctl+0x7f/0xb0 [ 1651.215620] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.215631] do_syscall_64+0x1d5/0x640 [ 1651.215648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1651.215658] RIP: 0033:0x45e219 [ 1651.215662] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.215672] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1651.215678] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.215683] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.215688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 1651.215693] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1651.262018] FAULT_INJECTION: forcing a failure. [ 1651.262018] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.262031] CPU: 0 PID: 10924 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1651.262037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.262041] Call Trace: [ 1651.262056] dump_stack+0x1b2/0x281 [ 1651.262071] should_fail.cold+0x10a/0x149 [ 1651.262091] should_failslab+0xd6/0x130 [ 1651.262105] kmem_cache_alloc+0x28e/0x3c0 [ 1651.262117] ? mempool_free+0x1d0/0x1d0 [ 1651.262129] mempool_create_node+0x2d2/0x3e0 [ 1651.262144] bioset_create+0x31b/0x750 [ 1651.262153] ? kmem_cache_alloc_node+0x38b/0x410 [ 1651.262167] blk_alloc_queue_node+0xa8/0xb40 [ 1651.262179] blk_mq_init_queue+0x42/0x90 [ 1651.262188] loop_add+0x303/0x830 [ 1651.262199] ? loop_queue_rq+0x280/0x280 [ 1651.262206] ? loop_queue_work+0x1e80/0x1e80 [ 1651.262217] ? trace_hardirqs_on+0x10/0x10 [ 1651.262229] loop_control_ioctl+0x11a/0x3f0 [ 1651.262238] ? loop_lookup+0x190/0x190 [ 1651.262247] ? SyS_write+0x1b7/0x210 [ 1651.262259] ? loop_lookup+0x190/0x190 [ 1651.262268] do_vfs_ioctl+0x75a/0xff0 [ 1651.262279] ? ioctl_preallocate+0x1a0/0x1a0 [ 1651.262287] ? lock_downgrade+0x740/0x740 [ 1651.262300] ? __fget+0x225/0x360 [ 1651.262309] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.262320] ? security_file_ioctl+0x83/0xb0 [ 1651.262330] SyS_ioctl+0x7f/0xb0 [ 1651.262338] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.262348] do_syscall_64+0x1d5/0x640 [ 1651.262363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1651.262371] RIP: 0033:0x45e219 [ 1651.262376] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.262386] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1651.262392] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.262397] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.262402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f 04:36:53 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:53 executing program 5 (fault-call:5 fault-nth:16): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0xfffffffffffffc52) 04:36:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r2, 0x0, 0xfffffffffffffc52) [ 1651.262407] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:53 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0xfffffffffffffc52) [ 1651.820088] FAULT_INJECTION: forcing a failure. [ 1651.820088] name failslab, interval 1, probability 0, space 0, times 0 04:36:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:53 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x21147bd8}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffd42}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x2, 0x2, 0x2, 0x3, 0x1, 0x18, 0x4}, @map_val={0x18, 0xf, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x38}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xff, &(0x7f00000000c0)=""/255, 0x41100, 0x1, [], r4, 0x1b, r5, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0xfffffffd}, 0x10, 0xffffffffffffffff}, 0x78) [ 1651.860984] CPU: 0 PID: 10933 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1651.868899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.878337] Call Trace: [ 1651.880935] dump_stack+0x1b2/0x281 [ 1651.884571] should_fail.cold+0x10a/0x149 [ 1651.888722] should_failslab+0xd6/0x130 [ 1651.892698] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1651.897806] ? mempool_free+0x1d0/0x1d0 [ 1651.901784] mempool_create_node+0x76/0x3e0 [ 1651.906117] ? mempool_kmalloc+0x20/0x20 04:36:53 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) [ 1651.906131] bioset_create+0x506/0x750 [ 1651.914065] ? kmem_cache_alloc_node+0x38b/0x410 [ 1651.914081] blk_alloc_queue_node+0xa8/0xb40 [ 1651.914094] blk_mq_init_queue+0x42/0x90 [ 1651.927402] loop_add+0x303/0x830 [ 1651.927413] ? loop_queue_rq+0x280/0x280 [ 1651.927423] ? loop_queue_work+0x1e80/0x1e80 [ 1651.939362] ? trace_hardirqs_on+0x10/0x10 [ 1651.939374] loop_control_ioctl+0x11a/0x3f0 [ 1651.947933] ? loop_lookup+0x190/0x190 [ 1651.951843] ? SyS_write+0x1b7/0x210 04:36:53 executing program 5 (fault-call:5 fault-nth:17): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 04:36:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) [ 1651.955564] ? loop_lookup+0x190/0x190 [ 1651.955575] do_vfs_ioctl+0x75a/0xff0 [ 1651.955587] ? ioctl_preallocate+0x1a0/0x1a0 04:36:53 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:53 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="70a7f052495246b9acd709b3a6d072b238c23b918d984998089a7c723c197347dbb8842cc6d1df1a1bf554dc255b1197a9b47bd99a8790a933f5d51900c97ca4d2b6c0534faeaa642e70803d8b0b6bd24ada555c7d03f291842697a79465d2d7b1b22d84e7a350a9e9278116192be44d0ed66e4b78bd28cfef6dea5a3041b5f0e4e11de0ba9c35661fc6d8d021c30f4f416b1b69f0951bbe30c043", 0x9b) connect$nfc_raw(r0, 0x0, 0x35) [ 1651.955598] ? lock_downgrade+0x740/0x740 [ 1651.955611] ? __fget+0x225/0x360 [ 1651.955620] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.955631] ? security_file_ioctl+0x83/0xb0 [ 1651.955640] SyS_ioctl+0x7f/0xb0 [ 1651.955647] ? do_vfs_ioctl+0xff0/0xff0 [ 1651.955659] do_syscall_64+0x1d5/0x640 [ 1651.955677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1651.955685] RIP: 0033:0x45e219 [ 1651.955690] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.955700] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 04:36:53 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1651.955705] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.955711] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.955716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 1651.955721] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1652.012661] FAULT_INJECTION: forcing a failure. [ 1652.012661] name failslab, interval 1, probability 0, space 0, times 0 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r3, 0x0, 0xfffffffffffffc52) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1652.108273] CPU: 0 PID: 10959 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1652.116169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.125533] Call Trace: [ 1652.125552] dump_stack+0x1b2/0x281 [ 1652.125566] should_fail.cold+0x10a/0x149 [ 1652.125580] should_failslab+0xd6/0x130 [ 1652.125594] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1652.125610] ? mempool_free+0x1d0/0x1d0 [ 1652.148964] __kmalloc_node+0x38/0x70 [ 1652.148978] mempool_create_node+0xb1/0x3e0 [ 1652.157079] ? mempool_kmalloc+0x20/0x20 04:36:54 executing program 4: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x35) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x1}}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x44000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c706f73697861636c2c6e6f6465766d61702c6d6d61702c616e616d653d2d2d2128252c6e6f6465766d6170ac76657273696f6e3d3970323030302c616e616d653d26232c6673757569643d37379636616374332d613161662d626565362d306636312d64393633316466612c61756469742c646566636f6e746578743d757365725f752c646f6e745f6d6561737572652c736d61636b6673726f6f743d285e202d285c2c736d61636b66737472616e736d7574653d5e272b2c004171bcbffb3c30fedd155e838844a3a1db7a34703bd917181f9f29c5bd88b9ff820da3bdb2cf07c867b2e10fc4fabbb417f27eae2359b8a2f8606eeecc8b7706fe11d1a3a5289ccb8ca4bc645a810353b4d5c54577c2a28762277d5217bab6642eb45ef0a8825c8d25a68908623629f99cea5ea3cd99aa44b2d30900000075a879e26c38d1d5c501d9a7281af263127e44ce07e1"]) 04:36:54 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) [ 1652.161147] bioset_create+0x506/0x750 04:36:54 executing program 5 (fault-call:5 fault-nth:18): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1652.165052] ? kmem_cache_alloc_node+0x38b/0x410 [ 1652.165069] blk_alloc_queue_node+0xa8/0xb40 [ 1652.165083] blk_mq_init_queue+0x42/0x90 [ 1652.165093] loop_add+0x303/0x830 [ 1652.165106] ? loop_queue_rq+0x280/0x280 04:36:54 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) socket(0x21, 0xa, 0x400) socket(0xb, 0x6, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="e100000008caec4ee75a1c36f3000000"]) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1652.165114] ? loop_queue_work+0x1e80/0x1e80 [ 1652.165126] ? trace_hardirqs_on+0x10/0x10 [ 1652.165138] loop_control_ioctl+0x11a/0x3f0 [ 1652.165147] ? loop_lookup+0x190/0x190 [ 1652.165156] ? SyS_write+0x1b7/0x210 [ 1652.165168] ? loop_lookup+0x190/0x190 [ 1652.165178] do_vfs_ioctl+0x75a/0xff0 [ 1652.165192] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.165200] ? lock_downgrade+0x740/0x740 [ 1652.165215] ? __fget+0x225/0x360 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) [ 1652.165224] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.165235] ? security_file_ioctl+0x83/0xb0 [ 1652.165247] SyS_ioctl+0x7f/0xb0 [ 1652.165255] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.165267] do_syscall_64+0x1d5/0x640 [ 1652.165290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.165298] RIP: 0033:0x45e219 [ 1652.165303] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.165314] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1652.165320] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.165325] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.165330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 1652.165336] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1652.257480] FAULT_INJECTION: forcing a failure. [ 1652.257480] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.376494] CPU: 0 PID: 10988 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x1) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) [ 1652.376501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.376504] Call Trace: [ 1652.376523] dump_stack+0x1b2/0x281 [ 1652.399971] should_fail.cold+0x10a/0x149 [ 1652.404119] should_failslab+0xd6/0x130 [ 1652.408087] kmem_cache_alloc+0x28e/0x3c0 [ 1652.412233] ? mempool_free+0x1d0/0x1d0 [ 1652.416219] mempool_create_node+0x2d2/0x3e0 [ 1652.416236] bioset_create+0x506/0x750 [ 1652.416250] ? kmem_cache_alloc_node+0x38b/0x410 [ 1652.416265] blk_alloc_queue_node+0xa8/0xb40 [ 1652.416278] blk_mq_init_queue+0x42/0x90 [ 1652.416288] loop_add+0x303/0x830 [ 1652.416301] ? loop_queue_rq+0x280/0x280 [ 1652.416309] ? loop_queue_work+0x1e80/0x1e80 [ 1652.416320] ? trace_hardirqs_on+0x10/0x10 [ 1652.416331] loop_control_ioctl+0x11a/0x3f0 [ 1652.416340] ? loop_lookup+0x190/0x190 [ 1652.416349] ? SyS_write+0x1b7/0x210 [ 1652.416361] ? loop_lookup+0x190/0x190 [ 1652.416372] do_vfs_ioctl+0x75a/0xff0 [ 1652.416384] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.416393] ? lock_downgrade+0x740/0x740 [ 1652.416406] ? __fget+0x225/0x360 [ 1652.416416] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.416426] ? security_file_ioctl+0x83/0xb0 [ 1652.416437] SyS_ioctl+0x7f/0xb0 [ 1652.416445] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.416457] do_syscall_64+0x1d5/0x640 [ 1652.416475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.416482] RIP: 0033:0x45e219 [ 1652.416487] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.416498] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1652.416504] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.416509] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.416515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 04:36:54 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 5 (fault-call:5 fault-nth:19): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000000, 0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@empty, 0x41}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, 0xb9, 0x4, 0x6, 0x3, 0x0, 0x3}) 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1652.416520] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:54 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0xfffffffffffffc52) 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1652.697170] FAULT_INJECTION: forcing a failure. [ 1652.697170] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.731088] CPU: 1 PID: 11024 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1652.731098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.748363] Call Trace: [ 1652.748380] dump_stack+0x1b2/0x281 [ 1652.754585] should_fail.cold+0x10a/0x149 [ 1652.754600] should_failslab+0xd6/0x130 [ 1652.754613] kmem_cache_alloc+0x28e/0x3c0 [ 1652.754624] ? mempool_free+0x1d0/0x1d0 [ 1652.754637] mempool_create_node+0x2d2/0x3e0 [ 1652.754653] bioset_create+0x506/0x750 [ 1652.754664] ? kmem_cache_alloc_node+0x38b/0x410 [ 1652.754679] blk_alloc_queue_node+0xa8/0xb40 [ 1652.754692] blk_mq_init_queue+0x42/0x90 [ 1652.754702] loop_add+0x303/0x830 [ 1652.754715] ? loop_queue_rq+0x280/0x280 [ 1652.754723] ? loop_queue_work+0x1e80/0x1e80 [ 1652.754735] ? trace_hardirqs_on+0x10/0x10 [ 1652.754746] loop_control_ioctl+0x11a/0x3f0 [ 1652.754753] ? loop_lookup+0x190/0x190 [ 1652.754764] ? SyS_write+0x1b7/0x210 [ 1652.820310] ? loop_lookup+0x190/0x190 [ 1652.820322] do_vfs_ioctl+0x75a/0xff0 [ 1652.828009] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.828019] ? lock_downgrade+0x740/0x740 [ 1652.828034] ? __fget+0x225/0x360 [ 1652.828044] ? do_vfs_ioctl+0xff0/0xff0 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1652.828056] ? security_file_ioctl+0x83/0xb0 [ 1652.828067] SyS_ioctl+0x7f/0xb0 [ 1652.828075] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.828088] do_syscall_64+0x1d5/0x640 [ 1652.828105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.828113] RIP: 0033:0x45e219 [ 1652.828120] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:54 executing program 5 (fault-call:5 fault-nth:20): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:54 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001140)={&(0x7f0000000040)="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", &(0x7f0000001040)=""/87, &(0x7f00000010c0)="c33e4665942505b13da1f12c23c2e1948050b08e6fdb644122470fcec12f0387feda08ece099913c0b88611d02203c3e4776cb203a04b515dbd5", &(0x7f0000001100)="8ae26504f2171e84320e761b37408317b29ffdc90bed88760d474631777fadd6832462968b2ac8b0f34a58f891bbe2dd452ebf1cb68b2e8a53f3f342", 0x7f, 0x1}, 0x38) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xcda}, 0x8) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) [ 1652.867962] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1652.867968] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.867974] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 5 (fault-call:5 fault-nth:21): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) [ 1652.867979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 1652.867985] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1652.958323] FAULT_INJECTION: forcing a failure. [ 1652.958323] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.958335] CPU: 0 PID: 11063 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1652.958341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.958345] Call Trace: [ 1652.958361] dump_stack+0x1b2/0x281 [ 1652.958375] should_fail.cold+0x10a/0x149 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x1) 04:36:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:54 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x4}, 0x10) 04:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) [ 1652.958410] should_failslab+0xd6/0x130 [ 1652.958425] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1652.958441] bdi_alloc_node+0x5d/0x2e0 [ 1652.958455] blk_alloc_queue_node+0xe2/0xb40 [ 1652.958468] blk_mq_init_queue+0x42/0x90 [ 1652.958478] loop_add+0x303/0x830 [ 1652.958490] ? loop_queue_rq+0x280/0x280 [ 1652.958498] ? loop_queue_work+0x1e80/0x1e80 [ 1652.958508] ? trace_hardirqs_on+0x10/0x10 [ 1652.958520] loop_control_ioctl+0x11a/0x3f0 [ 1652.958528] ? loop_lookup+0x190/0x190 [ 1652.958541] ? SyS_write+0x1b7/0x210 [ 1652.958553] ? loop_lookup+0x190/0x190 [ 1652.958563] do_vfs_ioctl+0x75a/0xff0 [ 1652.958575] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.958584] ? lock_downgrade+0x740/0x740 [ 1652.958598] ? __fget+0x225/0x360 [ 1652.958607] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.958618] ? security_file_ioctl+0x83/0xb0 [ 1652.958629] SyS_ioctl+0x7f/0xb0 [ 1652.958637] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.958648] do_syscall_64+0x1d5/0x640 [ 1652.958664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.958672] RIP: 0033:0x45e219 [ 1652.958677] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.958687] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1652.958693] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.958698] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.958704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1652.958710] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1653.005692] FAULT_INJECTION: forcing a failure. [ 1653.005692] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.214223] CPU: 0 PID: 11072 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1653.222315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.231650] Call Trace: [ 1653.234229] dump_stack+0x1b2/0x281 [ 1653.237837] should_fail.cold+0x10a/0x149 [ 1653.241981] should_failslab+0xd6/0x130 [ 1653.245946] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1653.250595] wb_congested_get_create+0x15b/0x360 [ 1653.255346] wb_init+0x4f6/0x7c0 [ 1653.258693] ? __raw_spin_lock_init+0x28/0x100 [ 1653.263255] cgwb_bdi_init+0xe2/0x1e0 [ 1653.267033] bdi_alloc_node+0x224/0x2e0 [ 1653.270987] blk_alloc_queue_node+0xe2/0xb40 [ 1653.275377] blk_mq_init_queue+0x42/0x90 [ 1653.279415] loop_add+0x303/0x830 [ 1653.282846] ? loop_queue_rq+0x280/0x280 [ 1653.286883] ? loop_queue_work+0x1e80/0x1e80 [ 1653.291268] ? trace_hardirqs_on+0x10/0x10 [ 1653.295492] loop_control_ioctl+0x11a/0x3f0 [ 1653.299789] ? loop_lookup+0x190/0x190 [ 1653.303723] ? SyS_write+0x1b7/0x210 [ 1653.307471] ? loop_lookup+0x190/0x190 [ 1653.311427] do_vfs_ioctl+0x75a/0xff0 [ 1653.315210] ? ioctl_preallocate+0x1a0/0x1a0 [ 1653.319597] ? lock_downgrade+0x740/0x740 [ 1653.323728] ? __fget+0x225/0x360 [ 1653.327336] ? do_vfs_ioctl+0xff0/0xff0 [ 1653.331355] ? security_file_ioctl+0x83/0xb0 [ 1653.335758] SyS_ioctl+0x7f/0xb0 [ 1653.339105] ? do_vfs_ioctl+0xff0/0xff0 [ 1653.343060] do_syscall_64+0x1d5/0x640 [ 1653.346930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1653.352098] RIP: 0033:0x45e219 [ 1653.355263] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) 04:36:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:55 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x41605abd) 04:36:55 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:55 executing program 5 (fault-call:5 fault-nth:22): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1653.362961] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1653.370222] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1653.377468] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.384715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1653.391962] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:55 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:55 executing program 4: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x35) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x8, 0x23, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x80, 0x400}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x50cc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, @generic={0x1, 0x4, 0x6, 0x2, 0x3f}, @generic={0x0, 0x9, 0x6, 0x5, 0x9}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xcf, &(0x7f0000000280)=""/207, 0x40e00, 0x1d, [], r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xd, 0x0, 0x3}, 0x10}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000680)=@srh={0x60, 0x6, 0x4, 0x3, 0x7f, 0x10, 0x9, [@private1, @dev={0xfe, 0x80, [], 0x2a}, @mcast1]}, 0x38) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in=@remote}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfe4f}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="5daa9a4b92ec56af74abed28950c949e77ab5fd1184f0b76ba142b585305b5054ae438af0cffc48741a9cd85b63c30b04c84cd99bb1f9b435609a2c736aa6351036a1fcd35f3f1e1b72e21673640f0a6b049fd517496b3a154ad27f17f0cfb218c49d436aa5d2aba48094bcd733dedccfca7d7f5d8dfe37da926390f13e1807094f0352041ca74446f10cd50b96eaf4a2a11c0efec0d6f2e5786b7f4fd61bff25e80d38117eef0d67ca57ada42c662bf482639f61d149bf6e8b2", 0xba}, {&(0x7f0000000100)="ffc3611f2c1665eae35588a5de9dcf3adde1be6b88579f74d40bfa6106681db013695b0502bca32237bfe2c0c133dba914d99ef924745235a0d57e1f5c0acbd672ec4a6beaa3631bc1", 0x49}], 0x2}, 0x20000010) 04:36:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) 04:36:55 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="20c185b0f378ea16f3de1bdc4f93eba363753c0dd3b7d9cb95ab19347f9c111e75bc80245e8397ece318780a56d48cf6474271bab1847c1926a46c87004f0ff99629070f55821a959eb13f25f0", 0x4d, 0x40000, &(0x7f00000000c0)={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0xe}, 0xfff}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) [ 1653.500642] FAULT_INJECTION: forcing a failure. [ 1653.500642] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.529545] CPU: 1 PID: 11105 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1653.537460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.546812] Call Trace: [ 1653.549408] dump_stack+0x1b2/0x281 [ 1653.553054] should_fail.cold+0x10a/0x149 [ 1653.557216] should_failslab+0xd6/0x130 [ 1653.561194] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1653.565866] blk_alloc_queue_stats+0x3c/0x100 [ 1653.570361] blk_alloc_queue_node+0x125/0xb40 [ 1653.574862] blk_mq_init_queue+0x42/0x90 [ 1653.578923] loop_add+0x303/0x830 [ 1653.582390] ? loop_queue_rq+0x280/0x280 [ 1653.586444] ? loop_queue_work+0x1e80/0x1e80 [ 1653.590852] ? trace_hardirqs_on+0x10/0x10 [ 1653.595085] loop_control_ioctl+0x11a/0x3f0 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) 04:36:55 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) [ 1653.599407] ? loop_lookup+0x190/0x190 [ 1653.603292] ? SyS_write+0x1b7/0x210 [ 1653.607021] ? loop_lookup+0x190/0x190 [ 1653.607032] do_vfs_ioctl+0x75a/0xff0 [ 1653.607045] ? ioctl_preallocate+0x1a0/0x1a0 [ 1653.607056] ? lock_downgrade+0x740/0x740 [ 1653.607071] ? __fget+0x225/0x360 [ 1653.607081] ? do_vfs_ioctl+0xff0/0xff0 [ 1653.607090] ? security_file_ioctl+0x83/0xb0 [ 1653.607100] SyS_ioctl+0x7f/0xb0 [ 1653.638429] ? do_vfs_ioctl+0xff0/0xff0 04:36:55 executing program 5 (fault-call:5 fault-nth:23): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:55 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x29, 0x5, 0x5) connect$nfc_raw(r0, 0x0, 0x0) 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x1) [ 1653.638442] do_syscall_64+0x1d5/0x640 [ 1653.638460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1653.638469] RIP: 0033:0x45e219 [ 1653.638473] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:55 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) connect$nfc_raw(r0, 0x0, 0x35) 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x29, 0x5, 0x5) connect$nfc_raw(r0, 0x0, 0x0) 04:36:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1653.638484] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1653.638489] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1653.638495] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.638500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1653.638506] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1653.699298] FAULT_INJECTION: forcing a failure. [ 1653.699298] name failslab, interval 1, probability 0, space 0, times 0 04:36:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 04:36:55 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x29, 0x5, 0x5) connect$nfc_raw(r0, 0x0, 0x0) 04:36:55 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/70) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$tipc(r1, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x0) connect$nfc_raw(r0, 0x0, 0x35) [ 1653.771804] CPU: 1 PID: 11131 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1653.779738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.789090] Call Trace: [ 1653.791682] dump_stack+0x1b2/0x281 [ 1653.795318] should_fail.cold+0x10a/0x149 [ 1653.799468] should_failslab+0xd6/0x130 [ 1653.803442] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1653.808558] blkg_alloc+0x92/0x5c0 [ 1653.808574] blkcg_init_queue+0x23/0x410 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x29, 0x5, 0x5) connect$nfc_raw(r0, 0x0, 0x0) 04:36:55 executing program 5 (fault-call:5 fault-nth:24): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:55 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1653.808588] blk_alloc_queue_node+0x826/0xb40 [ 1653.808602] blk_mq_init_queue+0x42/0x90 [ 1653.808611] loop_add+0x303/0x830 [ 1653.808625] ? loop_queue_rq+0x280/0x280 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket(0x29, 0x5, 0x5) 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket(0x29, 0x5, 0x5) [ 1653.808633] ? loop_queue_work+0x1e80/0x1e80 [ 1653.808644] ? trace_hardirqs_on+0x10/0x10 [ 1653.808656] loop_control_ioctl+0x11a/0x3f0 [ 1653.808665] ? loop_lookup+0x190/0x190 [ 1653.808674] ? SyS_write+0x1b7/0x210 [ 1653.808685] ? loop_lookup+0x190/0x190 [ 1653.808695] do_vfs_ioctl+0x75a/0xff0 [ 1653.808707] ? ioctl_preallocate+0x1a0/0x1a0 [ 1653.808715] ? lock_downgrade+0x740/0x740 [ 1653.808730] ? __fget+0x225/0x360 [ 1653.808739] ? do_vfs_ioctl+0xff0/0xff0 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket(0x29, 0x5, 0x5) 04:36:55 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket(0x29, 0x5, 0x5) [ 1653.808750] ? security_file_ioctl+0x83/0xb0 [ 1653.808761] SyS_ioctl+0x7f/0xb0 [ 1653.808768] ? do_vfs_ioctl+0xff0/0xff0 [ 1653.808781] do_syscall_64+0x1d5/0x640 [ 1653.808798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1653.808806] RIP: 0033:0x45e219 [ 1653.808811] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.808822] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1653.808827] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1653.808833] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.808838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1653.808844] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1653.905111] FAULT_INJECTION: forcing a failure. [ 1653.905111] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.021667] CPU: 1 PID: 11158 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1654.021674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.021677] Call Trace: 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:56 executing program 0: socket(0x29, 0x5, 0x5) [ 1654.021693] dump_stack+0x1b2/0x281 [ 1654.021705] should_fail.cold+0x10a/0x149 [ 1654.049336] should_failslab+0xd6/0x130 [ 1654.049351] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1654.049367] blk_throtl_init+0x7a/0x590 [ 1654.049379] blkcg_init_queue+0x18f/0x410 [ 1654.049393] blk_alloc_queue_node+0x826/0xb40 [ 1654.049407] blk_mq_init_queue+0x42/0x90 [ 1654.049417] loop_add+0x303/0x830 [ 1654.049430] ? loop_queue_rq+0x280/0x280 [ 1654.049438] ? loop_queue_work+0x1e80/0x1e80 [ 1654.049450] ? trace_hardirqs_on+0x10/0x10 04:36:56 executing program 0: socket(0x0, 0x5, 0x5) 04:36:56 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1654.049461] loop_control_ioctl+0x11a/0x3f0 [ 1654.049470] ? loop_lookup+0x190/0x190 [ 1654.049479] ? SyS_write+0x1b7/0x210 [ 1654.049491] ? loop_lookup+0x190/0x190 [ 1654.049501] do_vfs_ioctl+0x75a/0xff0 [ 1654.049514] ? ioctl_preallocate+0x1a0/0x1a0 [ 1654.049522] ? lock_downgrade+0x740/0x740 [ 1654.049534] ? __fget+0x225/0x360 [ 1654.122786] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.122797] ? security_file_ioctl+0x83/0xb0 [ 1654.122807] SyS_ioctl+0x7f/0xb0 [ 1654.122815] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.122826] do_syscall_64+0x1d5/0x640 [ 1654.122843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1654.122850] RIP: 0033:0x45e219 [ 1654.122855] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.122865] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1654.122871] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 04:36:56 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket(0x29, 0x5, 0x5) 04:36:56 executing program 5 (fault-call:5 fault-nth:25): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:56 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="28c549c522a46cc9d73778bf0034f284", 0x10}, {&(0x7f0000000140)="8ddbc2e1bba20bbc4d8591167b85261f4792b6aa485cf22fbd85ea3ea8020ac0301580f11eda3ebf293a0cbc6975b8af1219b61c44bf8d46eec1bac273b4a97e9617ee34090c1887ae8371c73df0dcf460135ed0be873e60920f970fd5ded76f105b0f24f7d82bbb56dec8865c303e21180be708e3a20689bc4b4ec005e4b9197a4c83affcd97129ec24", 0x8a}, {&(0x7f00000007c0)="0cf21df3a2fc72ab02129e96d0c7583f6f1846b14c5740f07e53b2133ea814dcf15b5bb30e30be1fa4", 0x29}], 0x3, &(0x7f0000000280)=[{0x60, 0x105, 0x8002, "701c224ff9eb2a5e723e5a730e3d59a881178e754eaa97d4a1b125cd05b21a8567bfcb2d4c0017a57f6b4b6102b6c7e651feac8535b5f804075ffb05a3ad64eefb617f4fd5b389d927f06527"}, {0xe8, 0x102, 0x1, "feec9663cbcd65961f98ae5eceefe677c42359cab24fcb9c5cee5d0e20380e37b149650c5b5c896ad5a187b6c9bd01ac260e4f040bbf2e4af5102ea45176f1e188dd68dad06f81dc88d8aa52848f05f80087eccc33f9bd55b2d98327f02ca096514ec291955e5ef0ba6014736b23af8fd4862f6de6fcf197a41800acd8dbece7a36241d1194d089f64f7ed17ac9d1d23eb8d53c1cb6ca8003a0669a9b711541a8d205b4adc1cc298fcaf1e3ccd1b0a8c8feaea8ce8a2f982b3bc0f9ad214cc554a52907d0ba5ae2723954a621c965ef3f29264"}, {0x108, 0x103, 0x3, "8f28d6895bc5c58dea46103ddd65e5cd5fedc0b70be80a54792fd2e81239cb1d1c1fd6248553ddf28d34e55a74c8f16a23c99d7f25e1a988adc7057a3c3ab1070954f2188a5224579d32e6cd409b3fe5a27314100a39333c273b6b7d4aa83637144dd0e2d3b7bee8651c117626d30da822645e4b44be447bb60fd214960f7b0d13ec7b8c7400fb367556adb28bd4fa50cd52c574dee2d93a5232955dbc4b3dfce81cf916a7b4e9d78ef2c79ca6a91717eb50b065f6d46e04069f5a208fea287e2fb52c7f07d1f98ea80a4921eb2a62ff32b9ec77d1bdf4874af724fad213eb1b28ae01ade08b975e15238f5f1a1550374996"}, {0xd0, 0x11, 0x1, "59fe0b9e574c93799ade93a2085a3df82b2e299f0bd6da23e19cb50807a3d208373344bf7fc98800e358592776c828bd1371ac0a778f2d147e2ed5f580028390f24969a390f1ce5099ab496854db130592e1ba1d526a56a9df71a4220323679bc644a29fe1a716c175f93594bc76101e0623cf269c3cadcc02ee48f92617dae57412697173f0c9f56add6ca349a5f549d9b96946c062b717e9635d0a57ae64e464d43907ac2adc2f4a80698f0310344184cb9a4207a74b430bb8e2"}, {0xf8, 0x108, 0x8, "5ad28dedcf7fc18895a4532016d7f5b129738132e154207ed4aae0733aedf4949118dd3232d267f26da7b3ce5842580225a09952f88c4337f11076037d572250979e265729c4371b58a92ba6e751cd6ac3f494b4a0473d5a1aae58854c89737b2898732090baf2d622ad5f97211dd1a822c20bb3a068f3fa8b947e08650229151d3e5438137837111761778384ad9844668e3b3855a0050f7c3fe9eec2d4494629f3b26ea5fe8f6914604501ab11018ca15f22aa7f4daec38e5e2358d241ec467361331fe0e1d52e0c724fad667d8d3a106fefd713651a6a4e2031848bc1729bb27b426a0ebafb3c"}, {0x50, 0x119, 0x6, "e6687dbd90ca6f8e7fe9ba02ae8fd7891efbcaa048ab3b7b0a7d332c355547a5164b324a35d05aaa3b639c23eae12cb6e7812e17ca762c8735b46d"}, {0x98, 0x107, 0x1ff, "cb64fe0c542a75fb3b484d3bd01a36ff8db6201a94427301fc95fac52ecad775793916ce6581829643fb66ad2fef48a43c9a82e84cbc2d68a06a30141705e9fa1c8072833d4580aad0a3964afe7e1789ebae94599c4bc09c0f702b588234c319d2ba758e2304e4d7e02819ccf7a95f4c746b181762e01f214dd54e24ad06323b1d9778466b91cb15"}], 0x500}, 0x40) 04:36:56 executing program 0: socket(0x0, 0x5, 0x5) 04:36:56 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1654.122875] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.122881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 1654.122886] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x1) 04:36:56 executing program 0: socket(0x0, 0x5, 0x5) 04:36:56 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000300)={0x1, 0x0, 0xfffffbff, 0x2a58b62d, &(0x7f0000000380)}) accept$inet(r1, 0x0, &(0x7f0000000040)) connect$nfc_raw(r1, 0x0, 0x0) [ 1654.281697] FAULT_INJECTION: forcing a failure. [ 1654.281697] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.305796] CPU: 1 PID: 11193 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1654.313702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.323056] Call Trace: [ 1654.325653] dump_stack+0x1b2/0x281 [ 1654.329283] should_fail.cold+0x10a/0x149 [ 1654.333439] should_failslab+0xd6/0x130 [ 1654.337425] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1654.342547] throtl_pd_alloc+0x59/0x990 [ 1654.346526] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 1654.350936] blkcg_activate_policy+0x115/0x5c0 [ 1654.355526] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1654.360548] blk_throtl_init+0x408/0x590 [ 1654.364614] blkcg_init_queue+0x18f/0x410 [ 1654.368762] blk_alloc_queue_node+0x826/0xb40 [ 1654.373260] blk_mq_init_queue+0x42/0x90 [ 1654.377325] loop_add+0x303/0x830 [ 1654.380783] ? loop_queue_rq+0x280/0x280 [ 1654.384840] ? loop_queue_work+0x1e80/0x1e80 [ 1654.389266] ? trace_hardirqs_on+0x10/0x10 [ 1654.393498] loop_control_ioctl+0x11a/0x3f0 [ 1654.397824] ? loop_lookup+0x190/0x190 [ 1654.401710] ? SyS_write+0x1b7/0x210 [ 1654.405422] ? loop_lookup+0x190/0x190 [ 1654.409308] do_vfs_ioctl+0x75a/0xff0 [ 1654.413118] ? ioctl_preallocate+0x1a0/0x1a0 [ 1654.417529] ? lock_downgrade+0x740/0x740 [ 1654.421677] ? __fget+0x225/0x360 [ 1654.425128] ? do_vfs_ioctl+0xff0/0xff0 04:36:56 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="28c549c522a46cc9d73778bf0034f284", 0x10}, {&(0x7f0000000140)="8ddbc2e1bba20bbc4d8591167b85261f4792b6aa485cf22fbd85ea3ea8020ac0301580f11eda3ebf293a0cbc6975b8af1219b61c44bf8d46eec1bac273b4a97e9617ee34090c1887ae8371c73df0dcf460135ed0be873e60920f970fd5ded76f105b0f24f7d82bbb56dec8865c303e21180be708e3a20689bc4b4ec005e4b9197a4c83affcd97129ec24", 0x8a}, {&(0x7f00000007c0)="0cf21df3a2fc72ab02129e96d0c7583f6f1846b14c5740f07e53b2133ea814dcf15b5bb30e30be1fa4", 0x29}], 0x3, &(0x7f0000000280)=[{0x60, 0x105, 0x8002, "701c224ff9eb2a5e723e5a730e3d59a881178e754eaa97d4a1b125cd05b21a8567bfcb2d4c0017a57f6b4b6102b6c7e651feac8535b5f804075ffb05a3ad64eefb617f4fd5b389d927f06527"}, {0xe8, 0x102, 0x1, "feec9663cbcd65961f98ae5eceefe677c42359cab24fcb9c5cee5d0e20380e37b149650c5b5c896ad5a187b6c9bd01ac260e4f040bbf2e4af5102ea45176f1e188dd68dad06f81dc88d8aa52848f05f80087eccc33f9bd55b2d98327f02ca096514ec291955e5ef0ba6014736b23af8fd4862f6de6fcf197a41800acd8dbece7a36241d1194d089f64f7ed17ac9d1d23eb8d53c1cb6ca8003a0669a9b711541a8d205b4adc1cc298fcaf1e3ccd1b0a8c8feaea8ce8a2f982b3bc0f9ad214cc554a52907d0ba5ae2723954a621c965ef3f29264"}, {0x108, 0x103, 0x3, "8f28d6895bc5c58dea46103ddd65e5cd5fedc0b70be80a54792fd2e81239cb1d1c1fd6248553ddf28d34e55a74c8f16a23c99d7f25e1a988adc7057a3c3ab1070954f2188a5224579d32e6cd409b3fe5a27314100a39333c273b6b7d4aa83637144dd0e2d3b7bee8651c117626d30da822645e4b44be447bb60fd214960f7b0d13ec7b8c7400fb367556adb28bd4fa50cd52c574dee2d93a5232955dbc4b3dfce81cf916a7b4e9d78ef2c79ca6a91717eb50b065f6d46e04069f5a208fea287e2fb52c7f07d1f98ea80a4921eb2a62ff32b9ec77d1bdf4874af724fad213eb1b28ae01ade08b975e15238f5f1a1550374996"}, {0xd0, 0x11, 0x1, "59fe0b9e574c93799ade93a2085a3df82b2e299f0bd6da23e19cb50807a3d208373344bf7fc98800e358592776c828bd1371ac0a778f2d147e2ed5f580028390f24969a390f1ce5099ab496854db130592e1ba1d526a56a9df71a4220323679bc644a29fe1a716c175f93594bc76101e0623cf269c3cadcc02ee48f92617dae57412697173f0c9f56add6ca349a5f549d9b96946c062b717e9635d0a57ae64e464d43907ac2adc2f4a80698f0310344184cb9a4207a74b430bb8e2"}, {0xf8, 0x108, 0x8, "5ad28dedcf7fc18895a4532016d7f5b129738132e154207ed4aae0733aedf4949118dd3232d267f26da7b3ce5842580225a09952f88c4337f11076037d572250979e265729c4371b58a92ba6e751cd6ac3f494b4a0473d5a1aae58854c89737b2898732090baf2d622ad5f97211dd1a822c20bb3a068f3fa8b947e08650229151d3e5438137837111761778384ad9844668e3b3855a0050f7c3fe9eec2d4494629f3b26ea5fe8f6914604501ab11018ca15f22aa7f4daec38e5e2358d241ec467361331fe0e1d52e0c724fad667d8d3a106fefd713651a6a4e2031848bc1729bb27b426a0ebafb3c"}, {0x50, 0x119, 0x6, "e6687dbd90ca6f8e7fe9ba02ae8fd7891efbcaa048ab3b7b0a7d332c355547a5164b324a35d05aaa3b639c23eae12cb6e7812e17ca762c8735b46d"}, {0x98, 0x107, 0x1ff, "cb64fe0c542a75fb3b484d3bd01a36ff8db6201a94427301fc95fac52ecad775793916ce6581829643fb66ad2fef48a43c9a82e84cbc2d68a06a30141705e9fa1c8072833d4580aad0a3964afe7e1789ebae94599c4bc09c0f702b588234c319d2ba758e2304e4d7e02819ccf7a95f4c746b181762e01f214dd54e24ad06323b1d9778466b91cb15"}], 0x500}, 0x40) 04:36:56 executing program 0: socket(0x29, 0x0, 0x5) 04:36:56 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 0: socket(0x29, 0x0, 0x5) 04:36:56 executing program 5 (fault-call:5 fault-nth:26): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:56 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 0: socket(0x29, 0x0, 0x5) 04:36:56 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1654.429100] ? security_file_ioctl+0x83/0xb0 [ 1654.433504] SyS_ioctl+0x7f/0xb0 [ 1654.436872] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.440847] do_syscall_64+0x1d5/0x640 [ 1654.444745] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1654.444752] RIP: 0033:0x45e219 [ 1654.444757] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:56 executing program 0: socket(0x29, 0x5, 0x0) 04:36:56 executing program 0: socket(0x29, 0x5, 0x0) [ 1654.444767] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1654.444772] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1654.444777] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.444781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 1654.444786] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1654.523662] FAULT_INJECTION: forcing a failure. [ 1654.523662] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.551975] CPU: 1 PID: 11224 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1654.551982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.551986] Call Trace: [ 1654.552003] dump_stack+0x1b2/0x281 [ 1654.552018] should_fail.cold+0x10a/0x149 [ 1654.552033] should_failslab+0xd6/0x130 [ 1654.552046] kmem_cache_alloc_node_trace+0x58/0x400 [ 1654.552062] throtl_pd_alloc+0x59/0x990 [ 1654.552072] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 1654.552080] blkcg_activate_policy+0x23e/0x5c0 [ 1654.552099] blk_throtl_init+0x408/0x590 [ 1654.552110] blkcg_init_queue+0x18f/0x410 [ 1654.552122] blk_alloc_queue_node+0x826/0xb40 [ 1654.552134] blk_mq_init_queue+0x42/0x90 [ 1654.552144] loop_add+0x303/0x830 [ 1654.552156] ? loop_queue_rq+0x280/0x280 [ 1654.552163] ? loop_queue_work+0x1e80/0x1e80 [ 1654.552173] ? trace_hardirqs_on+0x10/0x10 [ 1654.552184] loop_control_ioctl+0x11a/0x3f0 [ 1654.552193] ? loop_lookup+0x190/0x190 [ 1654.552201] ? SyS_write+0x1b7/0x210 [ 1654.552213] ? loop_lookup+0x190/0x190 [ 1654.552223] do_vfs_ioctl+0x75a/0xff0 [ 1654.552235] ? ioctl_preallocate+0x1a0/0x1a0 [ 1654.552243] ? lock_downgrade+0x740/0x740 [ 1654.552255] ? __fget+0x225/0x360 [ 1654.552264] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.552274] ? security_file_ioctl+0x83/0xb0 [ 1654.552282] SyS_ioctl+0x7f/0xb0 [ 1654.552288] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.552300] do_syscall_64+0x1d5/0x640 [ 1654.552317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1654.552325] RIP: 0033:0x45e219 [ 1654.552331] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.552342] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1654.552348] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1654.552353] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1654.552358] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a 04:36:56 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 0: socket(0x29, 0x5, 0x0) 04:36:56 executing program 5 (fault-call:5 fault-nth:27): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:56 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0xa, 0x40) connect$nfc_raw(r1, 0x0, 0x0) 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1654.552364] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:56 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) socket(0x21, 0xa, 0x400) socket(0xb, 0x6, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="e100000008caec4ee75a1c36f3000000"]) 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:56 executing program 4: r0 = socket(0x1b, 0x80000, 0x2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x4}, 0xff8b) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket(0x18, 0x1, 0x10001) connect$nfc_raw(r1, 0x0, 0x35) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x7, 0xc4, 0x0, 0x7f8, 0x4, r2, 0x1, [], 0x0, r3, 0x5, 0x0, 0x1}, 0x40) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = accept4$tipc(r2, 0x0, &(0x7f0000000080)=0xffffffffffffff42, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x200, 0x4) accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10, 0x80800) 04:36:56 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:56 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="b612e92e115f8e13fd8add6f3ec90a0345d09993f75a", 0x16, 0x20000840, &(0x7f0000000040)={0xa, 0x4e21, 0x460, @dev={0xfe, 0x80, [], 0x1b}, 0x6}, 0x1c) [ 1654.842904] FAULT_INJECTION: forcing a failure. [ 1654.842904] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.894517] CPU: 0 PID: 11249 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1654.902449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.902456] Call Trace: [ 1654.914390] dump_stack+0x1b2/0x281 [ 1654.918021] should_fail.cold+0x10a/0x149 [ 1654.922169] should_failslab+0xd6/0x130 [ 1654.926147] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1654.930834] ? blk_mq_can_queue+0x40/0x40 [ 1654.930846] ? queue_set_hctx_shared+0x210/0x210 [ 1654.939729] blk_stat_alloc_callback+0x54/0x2f0 [ 1654.944399] blk_mq_init_allocated_queue+0x80/0xfd0 [ 1654.949422] ? blkcg_init_queue+0x19f/0x410 [ 1654.949434] ? blk_alloc_queue_node+0x82f/0xb40 [ 1654.949446] blk_mq_init_queue+0x5a/0x90 [ 1654.962445] loop_add+0x303/0x830 [ 1654.962462] ? loop_queue_rq+0x280/0x280 [ 1654.962471] ? loop_queue_work+0x1e80/0x1e80 [ 1654.974352] ? trace_hardirqs_on+0x10/0x10 [ 1654.974367] loop_control_ioctl+0x11a/0x3f0 [ 1654.982907] ? loop_lookup+0x190/0x190 [ 1654.982919] ? SyS_write+0x1b7/0x210 [ 1654.982930] ? loop_lookup+0x190/0x190 04:36:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1654.982941] do_vfs_ioctl+0x75a/0xff0 [ 1654.982953] ? ioctl_preallocate+0x1a0/0x1a0 [ 1654.982963] ? lock_downgrade+0x740/0x740 [ 1654.982977] ? __fget+0x225/0x360 [ 1654.982987] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.982998] ? security_file_ioctl+0x83/0xb0 [ 1654.983009] SyS_ioctl+0x7f/0xb0 [ 1654.983015] ? do_vfs_ioctl+0xff0/0xff0 [ 1654.983028] do_syscall_64+0x1d5/0x640 [ 1655.029944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.035113] RIP: 0033:0x45e219 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x9}, 0x8) 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:57 executing program 3 (fault-call:0 fault-nth:0): socket(0x29, 0x5, 0x5) [ 1655.038284] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.045970] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1655.053223] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1655.060498] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.060506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 1655.060514] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:57 executing program 5 (fault-call:5 fault-nth:28): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:57 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x5}, 0x10) 04:36:57 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1655.147388] FAULT_INJECTION: forcing a failure. [ 1655.147388] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.159270] CPU: 0 PID: 11288 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1655.167161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.176515] Call Trace: [ 1655.179105] dump_stack+0x1b2/0x281 [ 1655.182749] should_fail.cold+0x10a/0x149 [ 1655.182764] should_failslab+0xd6/0x130 [ 1655.190922] kmem_cache_alloc+0x28e/0x3c0 04:36:57 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1655.190936] ? sock_destroy_inode+0x60/0x60 [ 1655.199376] sock_alloc_inode+0x19/0x250 [ 1655.203437] ? sock_destroy_inode+0x60/0x60 [ 1655.207759] alloc_inode+0x5d/0x170 [ 1655.211389] new_inode_pseudo+0x14/0xe0 [ 1655.215362] sock_alloc+0x3c/0x270 [ 1655.218916] __sock_create+0x8a/0x620 [ 1655.218930] SyS_socket+0xd1/0x1b0 [ 1655.226255] ? move_addr_to_kernel+0x60/0x60 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0xfffffffffffffd7b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10200, 0x0) [ 1655.226267] ? __do_page_fault+0x159/0xad0 04:36:57 executing program 5 (fault-call:5 fault-nth:29): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:57 executing program 3 (fault-call:0 fault-nth:1): socket(0x29, 0x5, 0x5) 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 1655.226278] ? do_syscall_64+0x4c/0x640 [ 1655.226287] ? move_addr_to_kernel+0x60/0x60 [ 1655.226298] do_syscall_64+0x1d5/0x640 [ 1655.226317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.226325] RIP: 0033:0x45e219 [ 1655.226330] RSP: 002b:00007f67741b1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1655.226340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1655.226347] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000029 [ 1655.226353] RBP: 00007f67741b1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.226359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.226364] R13: 00007ffe420f328f R14: 00007f67741b29c0 R15: 000000000119bf8c 04:36:57 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:36:57 executing program 5 (fault-call:5 fault-nth:30): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1655.247079] socket: no more sockets [ 1655.259850] FAULT_INJECTION: forcing a failure. [ 1655.259850] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.259862] CPU: 0 PID: 11300 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1655.259868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.259871] Call Trace: [ 1655.259886] dump_stack+0x1b2/0x281 [ 1655.259902] should_fail.cold+0x10a/0x149 [ 1655.259916] should_failslab+0xd6/0x130 [ 1655.259929] __kmalloc+0x2c1/0x400 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 1655.259940] ? blk_stat_alloc_callback+0x81/0x2f0 [ 1655.259951] ? blk_mq_can_queue+0x40/0x40 [ 1655.259960] ? queue_set_hctx_shared+0x210/0x210 [ 1655.259969] blk_stat_alloc_callback+0x81/0x2f0 [ 1655.259982] blk_mq_init_allocated_queue+0x80/0xfd0 [ 1655.259991] ? blkcg_init_queue+0x19f/0x410 [ 1655.260003] ? blk_alloc_queue_node+0x82f/0xb40 [ 1655.260015] blk_mq_init_queue+0x5a/0x90 [ 1655.260024] loop_add+0x303/0x830 [ 1655.260035] ? loop_queue_rq+0x280/0x280 [ 1655.260043] ? loop_queue_work+0x1e80/0x1e80 [ 1655.260053] ? trace_hardirqs_on+0x10/0x10 [ 1655.260064] loop_control_ioctl+0x11a/0x3f0 [ 1655.260073] ? loop_lookup+0x190/0x190 [ 1655.260081] ? SyS_write+0x1b7/0x210 [ 1655.260093] ? loop_lookup+0x190/0x190 [ 1655.260103] do_vfs_ioctl+0x75a/0xff0 [ 1655.260114] ? ioctl_preallocate+0x1a0/0x1a0 [ 1655.260122] ? lock_downgrade+0x740/0x740 [ 1655.260135] ? __fget+0x225/0x360 [ 1655.260143] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.260152] ? security_file_ioctl+0x83/0xb0 [ 1655.260162] SyS_ioctl+0x7f/0xb0 [ 1655.260168] ? do_vfs_ioctl+0xff0/0xff0 04:36:57 executing program 3 (fault-call:0 fault-nth:2): socket(0x29, 0x5, 0x5) 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:57 executing program 3: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000200)) socket(0x10, 0x800, 0x4007) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r0, 0x7, "1ac883", "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"}}, 0x110) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x136c38ec) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0xc0000) [ 1655.260179] do_syscall_64+0x1d5/0x640 [ 1655.260194] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.260201] RIP: 0033:0x45e219 [ 1655.260206] RSP: 002b:00007fb2e3616c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.260216] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1655.260221] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1655.260226] RBP: 00007fb2e3616ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.260232] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 1655.260238] R13: 00007ffcdea25b5f R14: 00007fb2e36179c0 R15: 000000000119c034 [ 1655.307886] FAULT_INJECTION: forcing a failure. [ 1655.307886] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.307899] CPU: 1 PID: 11311 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1655.307905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.307909] Call Trace: [ 1655.307923] dump_stack+0x1b2/0x281 [ 1655.307936] should_fail.cold+0x10a/0x149 [ 1655.307951] should_failslab+0xd6/0x130 [ 1655.307965] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1655.307979] __kmalloc_node+0x38/0x70 [ 1655.307992] blk_mq_init_allocated_queue+0x17b/0xfd0 [ 1655.308002] ? blkcg_init_queue+0x19f/0x410 [ 1655.308015] ? blk_alloc_queue_node+0x82f/0xb40 [ 1655.308027] blk_mq_init_queue+0x5a/0x90 [ 1655.308044] loop_add+0x303/0x830 [ 1655.308058] ? loop_queue_rq+0x280/0x280 [ 1655.308066] ? loop_queue_work+0x1e80/0x1e80 [ 1655.308077] ? trace_hardirqs_on+0x10/0x10 [ 1655.308090] loop_control_ioctl+0x11a/0x3f0 [ 1655.308099] ? loop_lookup+0x190/0x190 [ 1655.308108] ? SyS_write+0x1b7/0x210 [ 1655.308121] ? loop_lookup+0x190/0x190 [ 1655.308133] do_vfs_ioctl+0x75a/0xff0 [ 1655.308150] ? ioctl_preallocate+0x1a0/0x1a0 [ 1655.308160] ? lock_downgrade+0x740/0x740 [ 1655.308173] ? __fget+0x225/0x360 [ 1655.308184] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.308196] ? security_file_ioctl+0x83/0xb0 [ 1655.308207] SyS_ioctl+0x7f/0xb0 [ 1655.308215] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.308227] do_syscall_64+0x1d5/0x640 [ 1655.308244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.308251] RIP: 0033:0x45e219 [ 1655.308257] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.308267] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1655.308273] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1655.308279] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.308284] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 1655.308290] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1655.313112] FAULT_INJECTION: forcing a failure. [ 1655.313112] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.313123] CPU: 0 PID: 11313 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1655.313130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.313133] Call Trace: [ 1655.313147] dump_stack+0x1b2/0x281 [ 1655.313161] should_fail.cold+0x10a/0x149 [ 1655.313176] should_failslab+0xd6/0x130 [ 1655.313190] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1655.313200] ? kmem_cache_alloc+0x35f/0x3c0 [ 1655.313215] sock_alloc_inode+0x5f/0x250 [ 1655.313225] ? sock_destroy_inode+0x60/0x60 [ 1655.313234] alloc_inode+0x5d/0x170 [ 1655.313244] new_inode_pseudo+0x14/0xe0 [ 1655.313254] sock_alloc+0x3c/0x270 [ 1655.313265] __sock_create+0x8a/0x620 [ 1655.313279] SyS_socket+0xd1/0x1b0 [ 1655.313290] ? move_addr_to_kernel+0x60/0x60 [ 1655.313309] ? __do_page_fault+0x159/0xad0 [ 1655.313320] ? do_syscall_64+0x4c/0x640 [ 1655.313331] ? move_addr_to_kernel+0x60/0x60 [ 1655.313342] do_syscall_64+0x1d5/0x640 [ 1655.313359] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.313367] RIP: 0033:0x45e219 [ 1655.313373] RSP: 002b:00007f67741b1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1655.313383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1655.313388] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000029 [ 1655.313394] RBP: 00007f67741b1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.313399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.313405] R13: 00007ffe420f328f R14: 00007f67741b29c0 R15: 000000000119bf8c [ 1655.327793] socket: no more sockets 04:36:57 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) connect$nfc_raw(r0, 0x0, 0x0) 04:36:57 executing program 3: socket(0x29, 0x5, 0x5) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2, r0}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x20000, 0x0) connect$nfc_raw(r4, &(0x7f00000002c0)={0x27, 0x0, 0x2, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x4, 0x0, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/16, 0x10, 0xfffffffffffffffb, 0x3a}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x5f, 0x0, &(0x7f0000000180)="39341eb202ab5324afbe501a9257626990e2e5e8c7a046b2c3e888e4d6cf3eaa1ed3328ed2333f5867513d03543a7dfb9b608b45b9f399dda55dd669eeee5fd73055442b12e022c59a8adf3581c2402ec92dd7ecde0d8817011a6c568e5cbc"}) 04:36:57 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1655.460077] FAULT_INJECTION: forcing a failure. [ 1655.460077] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.937632] CPU: 1 PID: 11324 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1655.945518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.954895] Call Trace: [ 1655.957495] dump_stack+0x1b2/0x281 [ 1655.961123] should_fail.cold+0x10a/0x149 [ 1655.965275] should_failslab+0xd6/0x130 [ 1655.969248] kmem_cache_alloc_node_trace+0x25a/0x400 04:36:57 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 1655.974356] __kmalloc_node+0x38/0x70 [ 1655.978163] blk_mq_realloc_hw_ctxs+0x1a5/0xe00 [ 1655.982834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1655.987850] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1655.993132] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 1655.998246] ? blkcg_init_queue+0x19f/0x410 [ 1655.998260] ? blk_alloc_queue_node+0x82f/0xb40 [ 1655.998273] blk_mq_init_queue+0x5a/0x90 04:36:57 executing program 5 (fault-call:5 fault-nth:31): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:57 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1655.998283] loop_add+0x303/0x830 04:36:57 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:36:58 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) [ 1655.998296] ? loop_queue_rq+0x280/0x280 [ 1655.998304] ? loop_queue_work+0x1e80/0x1e80 [ 1655.998315] ? trace_hardirqs_on+0x10/0x10 [ 1655.998327] loop_control_ioctl+0x11a/0x3f0 [ 1655.998335] ? loop_lookup+0x190/0x190 [ 1655.998344] ? SyS_write+0x1b7/0x210 [ 1655.998356] ? loop_lookup+0x190/0x190 [ 1655.998367] do_vfs_ioctl+0x75a/0xff0 [ 1655.998379] ? ioctl_preallocate+0x1a0/0x1a0 [ 1655.998389] ? lock_downgrade+0x740/0x740 [ 1655.998403] ? __fget+0x225/0x360 [ 1655.998413] ? do_vfs_ioctl+0xff0/0xff0 04:36:58 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x15, 0x800, 0x8000) connect$nfc_raw(r0, 0x0, 0x7) 04:36:58 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x418000, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1000, 0x101001) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000080)={0x4, 0x7f, 0x7, 0xff, 0x2, [0xfffff272, 0x9, 0x7, 0x8], [0xb6, 0x4, 0x5, 0x3], [0x2, 0x4, 0x400, 0x2], [0x10001, 0x4, 0x7, 0x1]}) connect$nfc_raw(r0, 0x0, 0x35) [ 1655.998424] ? security_file_ioctl+0x83/0xb0 [ 1655.998435] SyS_ioctl+0x7f/0xb0 [ 1655.998442] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.998454] do_syscall_64+0x1d5/0x640 [ 1655.998472] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.998480] RIP: 0033:0x45e219 [ 1655.998485] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.998496] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1655.998502] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1655.998507] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.998513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 1655.998519] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1656.054073] FAULT_INJECTION: forcing a failure. [ 1656.054073] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.179141] CPU: 1 PID: 11351 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1656.179148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.179151] Call Trace: 04:36:58 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.179167] dump_stack+0x1b2/0x281 [ 1656.179179] should_fail.cold+0x10a/0x149 [ 1656.179192] should_failslab+0xd6/0x130 [ 1656.210700] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1656.210713] __kmalloc_node+0x38/0x70 [ 1656.219732] blk_mq_realloc_hw_ctxs+0x528/0xe00 [ 1656.219751] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 1656.229523] ? blkcg_init_queue+0x19f/0x410 [ 1656.229537] ? blk_alloc_queue_node+0x82f/0xb40 [ 1656.238503] blk_mq_init_queue+0x5a/0x90 04:36:58 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:58 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.242576] loop_add+0x303/0x830 [ 1656.242588] ? loop_queue_rq+0x280/0x280 [ 1656.242595] ? loop_queue_work+0x1e80/0x1e80 [ 1656.242607] ? trace_hardirqs_on+0x10/0x10 [ 1656.242618] loop_control_ioctl+0x11a/0x3f0 [ 1656.242627] ? loop_lookup+0x190/0x190 [ 1656.242636] ? SyS_write+0x1b7/0x210 [ 1656.242646] ? loop_lookup+0x190/0x190 [ 1656.242655] do_vfs_ioctl+0x75a/0xff0 [ 1656.242667] ? ioctl_preallocate+0x1a0/0x1a0 [ 1656.242674] ? lock_downgrade+0x740/0x740 [ 1656.242688] ? __fget+0x225/0x360 [ 1656.242697] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.242708] ? security_file_ioctl+0x83/0xb0 [ 1656.242718] SyS_ioctl+0x7f/0xb0 [ 1656.242725] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.242736] do_syscall_64+0x1d5/0x640 [ 1656.242754] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.242761] RIP: 0033:0x45e219 [ 1656.242766] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.242776] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1656.242780] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.242785] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.242790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f 04:36:58 executing program 3: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) socket(0x15, 0x5, 0x1) 04:36:58 executing program 5 (fault-call:5 fault-nth:32): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:58 executing program 4: r0 = socket(0x30, 0x4, 0x5) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x35) 04:36:58 executing program 2 (fault-call:2 fault-nth:0): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:58 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:58 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.242795] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:36:58 executing program 3: socket(0xf, 0x80000, 0x5) [ 1656.457544] FAULT_INJECTION: forcing a failure. [ 1656.457544] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.469670] CPU: 1 PID: 11390 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1656.477567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.478342] FAULT_INJECTION: forcing a failure. [ 1656.478342] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.486912] Call Trace: [ 1656.486933] dump_stack+0x1b2/0x281 04:36:58 executing program 3: r0 = socket(0x23, 0x5, 0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000034c0)={'ip6tnl0\x00', &(0x7f0000003440)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x8, 0x9a00, 0x0, @private1={0xfc, 0x1, [], 0x1}, @private0, 0x80, 0x10, 0x100, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003580)={'ip6_vti0\x00', &(0x7f0000003500)={'sit0\x00', r1, 0x29, 0x0, 0x2, 0x10000, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x15}, 0x7800, 0x7840, 0xffff, 0x2}}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002900)={&(0x7f0000000040)=@ipx={0x4, 0x3ff, 0x0, "fa4a778356a6", 0x2}, 0x80, &(0x7f0000002500)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="141122d66a8d232a3ed3373f203103aa7968dc302eb4d1677c6676d11ae356c481c795a4a7594b71959ca5981fe1f92b28bc0e22e733abbb6cebb1d0fbca2dde5f8563177560c7cd7524525fbbc2861c7f0b3504830eb2faebc6c14ec207cdffcbcd9009052ffd3c7efadeafa81f11643876b983894048cf54028a9c6f56299265745a617380721546236da9978f416dce7b5f24061107609ad83aefbdd256dc8726", 0xa2}, {&(0x7f0000001180)="3cafb28c6b0b90b89fe5be8db1df7f0d165dca1839998d8c77b6c4e15055a1433afb5a8cb89c6ad8cc0b7272df963bd7dfbcd8ef102b90e19a974f9be94ce80a63316c357feb75abf956593b2e851a267d793c3fc197479eb0f6b291769dc501014bd283a608bb166514c703dab0246fd506831da80f545f9bef93e30e2bfb148a9479e946597159f1dbd7690dc5fddbab02f68ea549aa99384462ae6bde963302fb183afb115253ac08c162009779", 0xaf}, {&(0x7f0000001240)="d8c82220c46d9a46c0e080a05249e2e0c77e3592e620335997e7b0664242c6201a97b46bbde2390f7554b7152d16263b48c1f1892c0c98f04a54d85973e5199afb58468890dcc1b59b3b867ad6a9ef608f7fd5e35bc608527b9652d056edd1d0510eba420b8d9e0d10ee7566e4eb23d5c762a075dde941900046afc9c5661dcc26d063bff14b51950df50257f58f92cce2fbd479f25e922949c735d16d74c17f2e009feb90b44ce40520dfdae4b18cdb818e2cd309288c6945957220d85f0848c2a658a2b06f3ec125353b5df2", 0xcd}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="ec43f3e20058d640dfcc3a1131cf8f0035b48c6de2da078358c0f72961d6", 0x1e}, {&(0x7f0000002380)="c2ddfa7a6094d97c71e5ffcc5f67bb178c92cf9accae21800bd6c7df179ef68d0fa0b9a95d77f960729c18f87a3ad4035211ddb0e384908604d6825e7583b96e52fd1d3f6a366e20e47b5def55f34bf35c8623d81b48a5eefed1371a6ca1facb13fe394da4b87c3f35c2bb25c5c9115b19d3e689eacb806451588b3600c64ce7fe7484433d202f318d84b982c5029ea12eda191e", 0x94}, {&(0x7f0000002440)="2331cb809cd1bf3c9f5035bcb6a13ec2506e5aef51410e824384b5f5f349a8ae80af7e8ae22594601bc82b27fa4a74dfe286c5a7af30219a81b56f1e282e691bcb8082085a812478d1c8628f30e78c805b7f14319f966de65be093f5ced90db3c11939677ee03caaf213a94df8d5eff07f9ff8a0f2e284fd9e42080e824b6210ee5024e590b81974121b19c0da82676dd8", 0x91}], 0x8, &(0x7f0000002580)=[{0xe0, 0x101, 0xf6e, "a3addd41af53bd38049eba8ca93d21ea60b8df650f5912e257ef16a8b1002d0e17708f1b600687d2011942d83c888b59658fe3f88b4981a66750be761e554f53b6627aababbfe6118f90fad9041211ccd76d15240687d7f1dd1b2210ccdb4416374b29de1c52b41a424e6bb1d4e2317bb43a93b7f4195f37c9e5a8c146f310a9c30509ad8dcf629e29d2ce4647eb45e1c09409ef1f6b441a3e96db4c07f6dae22733d0737d489f8eba8f313ae56e20d5afdd887f94f57191c7975e308e89faab37dad09a319dd23ea50ec5adc09858"}, {0xe8, 0x62b94c6bcb4e5526, 0xfffffff9, "ed8968fe34b0016832b430ecad316043ca07036635edc0aafeff5d8a6ec91345195b13871f648bada080e336df0e3f350988676673722a0ab5deacd1b08971c5718195932d95e2e28919b51a58edd5c0526a773d8a7d9ef3163dee821c1e1365d1b30e875e0896302c6efa9782d6904621f91cee17b5c1efce5af5e67fc239236c41dd5e949915a259cc8aa8c0f62aeffb5a8c473afc2991953a7ed2684510a1662786fa79d1304ceb55ff58efe4733602324c79c332456b7f2ace769f2b7c71105bb912c75096394bca09b66b53438ec2da18"}, {0xe8, 0x109, 0xb52c, "ae2bc3779252a02f7a593fd095c1c6834d006f51da6905272c12a8b3e156f49a010e556e1807c7f5c7df1ec4caec8efbe8d3dcdd1636c70fe2e451872fe7cf62f2356d81016e42b3598182033f9175d54a43a0077be4a0de3f16511d3befd32bd7617519358b637234bfe97ba29c1b1369568484ac34da827cfb3918f730ddcfd4b5d94e79cdc2d9a7f507f72e392d26ab3675f436b80c01de2f1d93c4fd1956b02cae4be7596fcc100a48a3b8c7d8ddf9ea1b807efacd81bfdce3bba24d1a05a30b8d7449139a20b09b84593b472ae33f640f"}, {0xa8, 0x1, 0x6, "4cc3f57851a2c916e9a8e52ad58e5db1ba0c6ce95fcc239327044f70d0918e5d315eb1d3a6f4b24d5fb38fc0d3e82a362c1cd485820df5f2468d33e76e729e085ea66e4593f37ffb9d6e0ed5bae10b520a29c2e149fa9b50d99bd0e5e64b63de09826947f0cab6bf3d6a97835f2df015e976019cd8a48e56b04ccb32ed77f3940728d405d8cc9bb3b3bf717871b4235be0fd98d897"}], 0x358}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r2}) 04:36:58 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.486947] should_fail.cold+0x10a/0x149 [ 1656.486961] should_failslab+0xd6/0x130 [ 1656.486975] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1656.486988] __kmalloc_node+0x38/0x70 [ 1656.487000] sbitmap_init_node+0x10c/0x3d0 [ 1656.487015] blk_mq_realloc_hw_ctxs+0x59b/0xe00 [ 1656.487041] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 1656.535936] ? blkcg_init_queue+0x19f/0x410 04:36:58 executing program 5 (fault-call:5 fault-nth:33): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80000) socket$tipc(0x1e, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x3) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r2, 0x0, 0x35) [ 1656.535950] ? blk_alloc_queue_node+0x82f/0xb40 04:36:58 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:58 executing program 2 (fault-call:2 fault-nth:1): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:58 executing program 5 (fault-call:5 fault-nth:34): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:58 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.535964] blk_mq_init_queue+0x5a/0x90 [ 1656.535974] loop_add+0x303/0x830 [ 1656.535987] ? loop_queue_rq+0x280/0x280 [ 1656.535995] ? loop_queue_work+0x1e80/0x1e80 [ 1656.536007] ? trace_hardirqs_on+0x10/0x10 04:36:58 executing program 2 (fault-call:2 fault-nth:2): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:58 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1656.536019] loop_control_ioctl+0x11a/0x3f0 [ 1656.536028] ? loop_lookup+0x190/0x190 [ 1656.536037] ? SyS_write+0x1b7/0x210 [ 1656.536048] ? loop_lookup+0x190/0x190 [ 1656.536059] do_vfs_ioctl+0x75a/0xff0 [ 1656.536071] ? ioctl_preallocate+0x1a0/0x1a0 [ 1656.536080] ? lock_downgrade+0x740/0x740 [ 1656.536094] ? __fget+0x225/0x360 [ 1656.536105] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.536116] ? security_file_ioctl+0x83/0xb0 [ 1656.536127] SyS_ioctl+0x7f/0xb0 [ 1656.536135] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.536148] do_syscall_64+0x1d5/0x640 [ 1656.536165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.536173] RIP: 0033:0x45e219 [ 1656.536178] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.536189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1656.536194] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.536200] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.536206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 1656.536212] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1656.584367] CPU: 0 PID: 11395 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1656.584375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.584378] Call Trace: [ 1656.584395] dump_stack+0x1b2/0x281 [ 1656.584410] should_fail.cold+0x10a/0x149 [ 1656.584424] should_failslab+0xd6/0x130 [ 1656.584437] kmem_cache_alloc+0x28e/0x3c0 [ 1656.584450] getname_flags+0xc8/0x550 [ 1656.584464] do_sys_open+0x1ce/0x410 [ 1656.584475] ? filp_open+0x60/0x60 [ 1656.584486] ? SyS_clock_settime+0x1a0/0x1a0 [ 1656.584496] ? do_syscall_64+0x4c/0x640 [ 1656.584504] ? do_sys_open+0x410/0x410 [ 1656.584514] do_syscall_64+0x1d5/0x640 [ 1656.584532] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.584540] RIP: 0033:0x417d11 [ 1656.584545] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1656.584555] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1656.584561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1656.584567] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.584572] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1656.584578] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1656.607107] FAULT_INJECTION: forcing a failure. [ 1656.607107] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.607119] CPU: 1 PID: 11408 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1656.607126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.607129] Call Trace: [ 1656.607150] dump_stack+0x1b2/0x281 [ 1656.607165] should_fail.cold+0x10a/0x149 [ 1656.607180] should_failslab+0xd6/0x130 [ 1656.607193] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1656.607209] blk_alloc_flush_queue+0x4f/0x2b0 [ 1656.607221] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 1656.607241] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 1656.607250] ? blkcg_init_queue+0x19f/0x410 [ 1656.607262] ? blk_alloc_queue_node+0x82f/0xb40 [ 1656.607274] blk_mq_init_queue+0x5a/0x90 [ 1656.607284] loop_add+0x303/0x830 [ 1656.607296] ? loop_queue_rq+0x280/0x280 [ 1656.607303] ? loop_queue_work+0x1e80/0x1e80 [ 1656.607314] ? trace_hardirqs_on+0x10/0x10 [ 1656.607325] loop_control_ioctl+0x11a/0x3f0 [ 1656.607334] ? loop_lookup+0x190/0x190 [ 1656.607342] ? SyS_write+0x1b7/0x210 [ 1656.607354] ? loop_lookup+0x190/0x190 [ 1656.607365] do_vfs_ioctl+0x75a/0xff0 [ 1656.607377] ? ioctl_preallocate+0x1a0/0x1a0 [ 1656.607385] ? lock_downgrade+0x740/0x740 [ 1656.607399] ? __fget+0x225/0x360 [ 1656.607409] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.607420] ? security_file_ioctl+0x83/0xb0 [ 1656.607431] SyS_ioctl+0x7f/0xb0 [ 1656.607438] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.607450] do_syscall_64+0x1d5/0x640 [ 1656.607467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.607474] RIP: 0033:0x45e219 [ 1656.607480] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.607490] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1656.607503] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.607509] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.607515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 1656.607521] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1656.652372] FAULT_INJECTION: forcing a failure. [ 1656.652372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1656.652384] CPU: 1 PID: 11416 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1656.652390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.652393] Call Trace: [ 1656.652409] dump_stack+0x1b2/0x281 [ 1656.652422] should_fail.cold+0x10a/0x149 [ 1656.652442] __alloc_pages_nodemask+0x22c/0x2720 [ 1656.652461] ? __lock_acquire+0x5fc/0x3f20 [ 1656.652474] ? get_pid_task+0x91/0x130 [ 1656.652486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1656.652505] ? lock_downgrade+0x740/0x740 [ 1656.652519] ? get_pid_task+0xb8/0x130 [ 1656.652531] ? proc_fail_nth_write+0x7b/0x180 [ 1656.652541] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1656.652557] cache_grow_begin+0x91/0x630 [ 1656.652569] ? check_preemption_disabled+0x35/0x240 [ 1656.652582] cache_alloc_refill+0x273/0x350 [ 1656.652596] kmem_cache_alloc+0x333/0x3c0 [ 1656.652610] getname_flags+0xc8/0x550 [ 1656.652623] do_sys_open+0x1ce/0x410 [ 1656.652633] ? filp_open+0x60/0x60 [ 1656.652643] ? SyS_clock_settime+0x1a0/0x1a0 [ 1656.652653] ? do_syscall_64+0x4c/0x640 [ 1656.652661] ? do_sys_open+0x410/0x410 [ 1656.652671] do_syscall_64+0x1d5/0x640 [ 1656.652687] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.652695] RIP: 0033:0x417d11 [ 1656.652700] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1656.652710] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1656.652716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1656.652721] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.652726] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1656.652732] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1656.660702] FAULT_INJECTION: forcing a failure. [ 1656.660702] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.660714] CPU: 0 PID: 11417 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1656.660720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.660724] Call Trace: [ 1656.660739] dump_stack+0x1b2/0x281 [ 1656.660754] should_fail.cold+0x10a/0x149 [ 1656.660767] should_failslab+0xd6/0x130 [ 1656.660782] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1656.660796] __kmalloc_node+0x38/0x70 [ 1656.660809] blk_alloc_flush_queue+0xf7/0x2b0 [ 1656.660821] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 1656.660841] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 1656.660851] ? blkcg_init_queue+0x19f/0x410 [ 1656.660863] ? blk_alloc_queue_node+0x82f/0xb40 [ 1656.660875] blk_mq_init_queue+0x5a/0x90 [ 1656.660885] loop_add+0x303/0x830 [ 1656.660896] ? loop_queue_rq+0x280/0x280 [ 1656.660903] ? loop_queue_work+0x1e80/0x1e80 [ 1656.660914] ? trace_hardirqs_on+0x10/0x10 [ 1656.660926] loop_control_ioctl+0x11a/0x3f0 [ 1656.660935] ? loop_lookup+0x190/0x190 [ 1656.660943] ? SyS_write+0x1b7/0x210 [ 1656.660955] ? loop_lookup+0x190/0x190 [ 1656.660965] do_vfs_ioctl+0x75a/0xff0 [ 1656.660977] ? ioctl_preallocate+0x1a0/0x1a0 [ 1656.660986] ? lock_downgrade+0x740/0x740 [ 1656.661007] ? __fget+0x225/0x360 [ 1656.661018] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.661029] ? security_file_ioctl+0x83/0xb0 [ 1656.661043] SyS_ioctl+0x7f/0xb0 [ 1656.661051] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.661062] do_syscall_64+0x1d5/0x640 [ 1656.661078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.661085] RIP: 0033:0x45e219 [ 1656.661091] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.661101] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1656.661107] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.661112] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.661118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 1656.661124] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1656.692124] FAULT_INJECTION: forcing a failure. [ 1656.692124] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.692135] CPU: 1 PID: 11423 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1656.692142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.692145] Call Trace: [ 1656.692160] dump_stack+0x1b2/0x281 [ 1656.692173] should_fail.cold+0x10a/0x149 [ 1656.692186] should_failslab+0xd6/0x130 [ 1656.692198] kmem_cache_alloc+0x28e/0x3c0 [ 1656.692212] get_empty_filp+0x86/0x3e0 [ 1656.692228] path_openat+0x84/0x2970 [ 1656.692239] ? get_pid_task+0x91/0x130 [ 1656.692254] ? path_lookupat+0x780/0x780 [ 1656.692264] ? trace_hardirqs_on+0x10/0x10 [ 1656.692282] do_filp_open+0x179/0x3c0 [ 1656.692292] ? may_open_dev+0xe0/0xe0 [ 1656.692303] ? __alloc_fd+0x1be/0x490 [ 1656.692316] ? lock_downgrade+0x740/0x740 [ 1656.692330] ? do_raw_spin_unlock+0x164/0x220 [ 1656.692341] ? _raw_spin_unlock+0x29/0x40 [ 1656.692348] ? __alloc_fd+0x1be/0x490 [ 1656.692364] do_sys_open+0x296/0x410 [ 1656.692374] ? filp_open+0x60/0x60 [ 1656.692385] ? SyS_clock_settime+0x1a0/0x1a0 [ 1656.692394] ? do_syscall_64+0x4c/0x640 [ 1656.692402] ? do_sys_open+0x410/0x410 [ 1656.692413] do_syscall_64+0x1d5/0x640 [ 1656.692428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.692436] RIP: 0033:0x417d11 04:36:59 executing program 5 (fault-call:5 fault-nth:35): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:36:59 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:59 executing program 3: r0 = socket(0x29, 0x5, 0x5) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x1, 0x2}) 04:36:59 executing program 2 (fault-call:2 fault-nth:3): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:36:59 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:59 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x4f) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000080)=0x1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) [ 1656.692441] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1656.692452] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1656.692457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1656.692462] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.692468] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 1656.692474] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c 04:36:59 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1657.692215] FAULT_INJECTION: forcing a failure. [ 1657.692215] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.710730] FAULT_INJECTION: forcing a failure. [ 1657.710730] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.732023] CPU: 1 PID: 11437 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1657.739935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.749290] Call Trace: [ 1657.751884] dump_stack+0x1b2/0x281 [ 1657.755519] should_fail.cold+0x10a/0x149 [ 1657.759670] should_failslab+0xd6/0x130 [ 1657.763646] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1657.768742] blk_mq_init_tags+0x5e/0x280 [ 1657.772795] blk_mq_alloc_rq_map+0x90/0x220 [ 1657.777112] blk_mq_sched_alloc_tags+0xaa/0x240 [ 1657.782471] blk_mq_init_sched+0x18d/0x4a0 [ 1657.786724] ? _raw_spin_unlock+0x29/0x40 [ 1657.790875] elevator_init+0x2ee/0x410 [ 1657.794754] blk_mq_sched_init+0x28/0x40 [ 1657.798805] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1657.803902] blk_mq_init_queue+0x5a/0x90 [ 1657.807963] loop_add+0x303/0x830 [ 1657.811408] ? loop_queue_rq+0x280/0x280 [ 1657.815453] ? loop_queue_work+0x1e80/0x1e80 [ 1657.819851] ? trace_hardirqs_on+0x10/0x10 [ 1657.824069] loop_control_ioctl+0x11a/0x3f0 [ 1657.828378] ? loop_lookup+0x190/0x190 [ 1657.832254] ? SyS_write+0x1b7/0x210 [ 1657.835963] ? loop_lookup+0x190/0x190 [ 1657.839847] do_vfs_ioctl+0x75a/0xff0 [ 1657.843638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1657.848037] ? lock_downgrade+0x740/0x740 [ 1657.852182] ? __fget+0x225/0x360 [ 1657.855630] ? do_vfs_ioctl+0xff0/0xff0 [ 1657.859595] ? security_file_ioctl+0x83/0xb0 [ 1657.863985] SyS_ioctl+0x7f/0xb0 [ 1657.867331] ? do_vfs_ioctl+0xff0/0xff0 [ 1657.871290] do_syscall_64+0x1d5/0x640 [ 1657.875196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1657.880370] RIP: 0033:0x45e219 [ 1657.883538] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:36:59 executing program 3: r0 = socket(0x2b, 0x5, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2}) 04:36:59 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x400) 04:36:59 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1657.891224] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1657.898474] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1657.905727] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.912980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 1657.920233] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1657.927500] CPU: 0 PID: 11440 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 04:36:59 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:36:59 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1657.935386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.944739] Call Trace: [ 1657.947333] dump_stack+0x1b2/0x281 [ 1657.950968] should_fail.cold+0x10a/0x149 [ 1657.955121] should_failslab+0xd6/0x130 [ 1657.959105] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1657.963794] apparmor_file_alloc_security+0x129/0x800 [ 1657.963811] security_file_alloc+0x66/0xa0 [ 1657.963820] ? selinux_is_enabled+0x5/0x50 [ 1657.963833] get_empty_filp+0x15c/0x3e0 [ 1657.981406] path_openat+0x84/0x2970 [ 1657.985252] ? get_pid_task+0x91/0x130 [ 1657.989142] ? path_lookupat+0x780/0x780 [ 1657.993205] ? trace_hardirqs_on+0x10/0x10 [ 1657.997449] do_filp_open+0x179/0x3c0 [ 1658.001247] ? may_open_dev+0xe0/0xe0 [ 1658.005047] ? __alloc_fd+0x1be/0x490 [ 1658.008847] ? lock_downgrade+0x740/0x740 [ 1658.013005] ? do_raw_spin_unlock+0x164/0x220 [ 1658.017520] ? _raw_spin_unlock+0x29/0x40 [ 1658.021661] ? __alloc_fd+0x1be/0x490 [ 1658.025469] do_sys_open+0x296/0x410 [ 1658.029183] ? filp_open+0x60/0x60 [ 1658.032719] ? SyS_clock_settime+0x1a0/0x1a0 [ 1658.037127] ? do_syscall_64+0x4c/0x640 04:37:00 executing program 5 (fault-call:5 fault-nth:36): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:00 executing program 1: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1658.041100] ? do_sys_open+0x410/0x410 [ 1658.045010] do_syscall_64+0x1d5/0x640 [ 1658.048899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.054088] RIP: 0033:0x417d11 [ 1658.057268] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1658.064987] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1658.064993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1658.064998] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.065003] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 1658.065008] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1658.114482] FAULT_INJECTION: forcing a failure. 04:37:00 executing program 2 (fault-call:2 fault-nth:4): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x6, 0xa2000) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000001c0)=[0x400, 0x8, 0x0, 0x0, 0x7, 0x57a2], &(0x7f0000000040)=[0x4, 0x246, 0xffffffc0, 0x2, 0x80, 0x6, 0x20, 0x0], 0xf1, 0x6, 0x10000000, &(0x7f0000000080)=[0x4, 0x0, 0x3, 0x0, 0x5, 0x254], &(0x7f00000000c0)=[0x3, 0x80000000]}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r2, 0x81, 0x9, 0x8, 0x1, 0x1, 0x1000, 0x80000000, 0x0, 0x2, 0x10001}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 04:37:00 executing program 1: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:00 executing program 5 (fault-call:5 fault-nth:37): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1658.114482] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.114495] CPU: 1 PID: 11459 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1658.114502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.114505] Call Trace: [ 1658.114521] dump_stack+0x1b2/0x281 [ 1658.114535] should_fail.cold+0x10a/0x149 [ 1658.114550] should_failslab+0xd6/0x130 [ 1658.114564] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1658.114578] __kmalloc_node+0x38/0x70 [ 1658.114589] sbitmap_init_node+0x10c/0x3d0 [ 1658.114603] sbitmap_queue_init_node+0x37/0x5d0 [ 1658.114615] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1658.114626] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1658.114640] blk_mq_init_tags+0xf4/0x280 [ 1658.114652] blk_mq_alloc_rq_map+0x90/0x220 [ 1658.114665] blk_mq_sched_alloc_tags+0xaa/0x240 [ 1658.114677] blk_mq_init_sched+0x18d/0x4a0 [ 1658.114688] ? _raw_spin_unlock+0x29/0x40 [ 1658.114702] elevator_init+0x2ee/0x410 [ 1658.114712] blk_mq_sched_init+0x28/0x40 [ 1658.114722] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1658.114738] blk_mq_init_queue+0x5a/0x90 [ 1658.114748] loop_add+0x303/0x830 [ 1658.114760] ? loop_queue_rq+0x280/0x280 [ 1658.114768] ? loop_queue_work+0x1e80/0x1e80 [ 1658.114778] ? trace_hardirqs_on+0x10/0x10 [ 1658.114790] loop_control_ioctl+0x11a/0x3f0 [ 1658.114798] ? loop_lookup+0x190/0x190 [ 1658.114806] ? SyS_write+0x1b7/0x210 [ 1658.114818] ? loop_lookup+0x190/0x190 [ 1658.114828] do_vfs_ioctl+0x75a/0xff0 [ 1658.114840] ? ioctl_preallocate+0x1a0/0x1a0 [ 1658.114849] ? lock_downgrade+0x740/0x740 [ 1658.114863] ? __fget+0x225/0x360 [ 1658.114873] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.114883] ? security_file_ioctl+0x83/0xb0 [ 1658.114894] SyS_ioctl+0x7f/0xb0 [ 1658.114901] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.114918] do_syscall_64+0x1d5/0x640 [ 1658.114935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.114947] RIP: 0033:0x45e219 [ 1658.114953] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.114962] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1658.114968] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1658.114973] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.114978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1658.114983] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1658.174260] FAULT_INJECTION: forcing a failure. [ 1658.174260] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.174272] CPU: 0 PID: 11469 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1658.174277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.174280] Call Trace: [ 1658.174296] dump_stack+0x1b2/0x281 [ 1658.174310] should_fail.cold+0x10a/0x149 [ 1658.174324] should_failslab+0xd6/0x130 [ 1658.174337] kmem_cache_alloc_trace+0x47/0x3d0 [ 1658.174352] proc_self_get_link+0x1af/0x220 [ 1658.174362] ? proc_ns_dir_lookup+0x250/0x250 [ 1658.174372] link_path_walk+0xc47/0x10a0 [ 1658.174387] ? walk_component+0xbc0/0xbc0 [ 1658.174400] path_openat+0x15e/0x2970 [ 1658.174410] ? get_pid_task+0x91/0x130 [ 1658.174425] ? path_lookupat+0x780/0x780 [ 1658.174436] ? trace_hardirqs_on+0x10/0x10 [ 1658.174453] do_filp_open+0x179/0x3c0 [ 1658.174465] ? may_open_dev+0xe0/0xe0 [ 1658.174485] ? do_raw_spin_unlock+0x164/0x220 [ 1658.174494] ? __alloc_fd+0x1be/0x490 [ 1658.174510] do_sys_open+0x296/0x410 [ 1658.174521] ? filp_open+0x60/0x60 [ 1658.174532] ? SyS_clock_settime+0x1a0/0x1a0 [ 1658.174541] ? do_syscall_64+0x4c/0x640 [ 1658.174549] ? do_sys_open+0x410/0x410 [ 1658.174560] do_syscall_64+0x1d5/0x640 [ 1658.174576] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.174584] RIP: 0033:0x417d11 [ 1658.174589] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1658.174599] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1658.174604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1658.174609] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.174614] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 1658.174620] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1658.175073] FAULT_INJECTION: forcing a failure. [ 1658.175073] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.175083] CPU: 1 PID: 11467 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1658.175089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.175093] Call Trace: [ 1658.175105] dump_stack+0x1b2/0x281 [ 1658.175117] should_fail.cold+0x10a/0x149 [ 1658.175129] should_failslab+0xd6/0x130 [ 1658.175141] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1658.175156] sbitmap_queue_init_node+0x27f/0x5d0 [ 1658.175175] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1658.175190] blk_mq_init_tags+0xf4/0x280 [ 1658.175202] blk_mq_alloc_rq_map+0x90/0x220 [ 1658.175212] blk_mq_sched_alloc_tags+0xaa/0x240 [ 1658.175225] blk_mq_init_sched+0x18d/0x4a0 [ 1658.175235] ? _raw_spin_unlock+0x29/0x40 [ 1658.175249] elevator_init+0x2ee/0x410 [ 1658.175259] blk_mq_sched_init+0x28/0x40 [ 1658.175270] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1658.175286] blk_mq_init_queue+0x5a/0x90 [ 1658.175295] loop_add+0x303/0x830 [ 1658.175307] ? loop_queue_rq+0x280/0x280 [ 1658.175315] ? loop_queue_work+0x1e80/0x1e80 [ 1658.175326] ? trace_hardirqs_on+0x10/0x10 [ 1658.175338] loop_control_ioctl+0x11a/0x3f0 [ 1658.175346] ? loop_lookup+0x190/0x190 [ 1658.175355] ? SyS_write+0x1b7/0x210 [ 1658.175366] ? loop_lookup+0x190/0x190 [ 1658.175377] do_vfs_ioctl+0x75a/0xff0 [ 1658.175388] ? ioctl_preallocate+0x1a0/0x1a0 [ 1658.175397] ? lock_downgrade+0x740/0x740 [ 1658.175411] ? __fget+0x225/0x360 [ 1658.175421] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.175431] ? security_file_ioctl+0x83/0xb0 [ 1658.175442] SyS_ioctl+0x7f/0xb0 [ 1658.175449] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.175460] do_syscall_64+0x1d5/0x640 [ 1658.175475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.175482] RIP: 0033:0x45e219 04:37:00 executing program 3: socket(0xa, 0x5, 0x5) prctl$PR_SVE_GET_VL(0x33, 0x1f57e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) 04:37:00 executing program 2 (fault-call:2 fault-nth:5): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:00 executing program 5 (fault-call:5 fault-nth:38): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:00 executing program 1: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:00 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1658.175487] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.175497] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1658.175503] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1658.175508] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.175513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 1658.175519] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c 04:37:00 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xffffffffffffff17) [ 1658.841818] FAULT_INJECTION: forcing a failure. [ 1658.841818] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.845414] FAULT_INJECTION: forcing a failure. [ 1658.845414] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.867302] CPU: 0 PID: 11481 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1658.875192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.884544] Call Trace: [ 1658.887139] dump_stack+0x1b2/0x281 04:37:00 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1658.890759] should_fail.cold+0x10a/0x149 [ 1658.894900] should_failslab+0xd6/0x130 [ 1658.898885] kmem_cache_alloc+0x28e/0x3c0 [ 1658.898897] alloc_inode+0xa0/0x170 [ 1658.906651] new_inode_pseudo+0x14/0xe0 [ 1658.906662] __ns_get_path+0xf8/0x6f0 [ 1658.914407] ns_get_path+0x55/0xa0 04:37:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:00 executing program 5 (fault-call:5 fault-nth:39): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:00 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1658.914417] proc_ns_get_link+0x12e/0x160 [ 1658.914423] ? proc_ns_readlink+0x1c0/0x1c0 [ 1658.914432] ? security_inode_follow_link+0xca/0x100 [ 1658.914442] trailing_symlink+0x59c/0x750 04:37:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1658.914448] ? proc_ns_readlink+0x1c0/0x1c0 [ 1658.914456] path_openat+0x795/0x2970 [ 1658.914468] ? path_lookupat+0x780/0x780 [ 1658.914477] ? trace_hardirqs_on+0x10/0x10 04:37:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:01 executing program 2 (fault-call:2 fault-nth:6): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:01 executing program 5 (fault-call:5 fault-nth:40): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:01 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:01 executing program 3: socket(0x18, 0x5, 0x5) socket(0x10, 0x1, 0x6) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xa6, 0x5, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2, 0x40, 0x8, 0x314, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r3, 0x2f, 0x2, 0x4, 0x96f, 0x2e, @dev={0xfe, 0x80, [], 0x41}, @ipv4={[], [], @local}, 0x20, 0x4710, 0x2, 0x55c}}) [ 1658.914489] do_filp_open+0x179/0x3c0 [ 1658.914496] ? may_open_dev+0xe0/0xe0 [ 1658.914510] ? do_raw_spin_unlock+0x164/0x220 [ 1658.914517] ? __alloc_fd+0x1be/0x490 [ 1658.914528] do_sys_open+0x296/0x410 [ 1658.914535] ? filp_open+0x60/0x60 04:37:01 executing program 2 (fault-call:2 fault-nth:7): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1658.914542] ? SyS_clock_settime+0x1a0/0x1a0 [ 1658.914549] ? do_syscall_64+0x4c/0x640 [ 1658.914555] ? do_sys_open+0x410/0x410 [ 1658.914562] do_syscall_64+0x1d5/0x640 [ 1658.914574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.914580] RIP: 0033:0x417d11 [ 1658.914584] RSP: 002b:00007f00928ddc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1658.914591] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417d11 [ 1658.914595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c2e8a [ 1658.914599] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.914602] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 1658.914606] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1658.914623] CPU: 1 PID: 11482 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1658.914629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.914632] Call Trace: [ 1658.914646] dump_stack+0x1b2/0x281 [ 1658.914658] should_fail.cold+0x10a/0x149 [ 1658.914670] should_failslab+0xd6/0x130 [ 1658.914681] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1658.914695] sbitmap_queue_init_node+0x27f/0x5d0 [ 1658.914708] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1658.914720] blk_mq_init_tags+0x14b/0x280 [ 1658.914730] blk_mq_alloc_rq_map+0x90/0x220 [ 1658.914748] blk_mq_sched_alloc_tags+0xaa/0x240 [ 1658.914760] blk_mq_init_sched+0x18d/0x4a0 [ 1658.914769] ? _raw_spin_unlock+0x29/0x40 [ 1658.914781] elevator_init+0x2ee/0x410 [ 1658.914791] blk_mq_sched_init+0x28/0x40 [ 1658.914801] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1658.914816] blk_mq_init_queue+0x5a/0x90 [ 1658.914826] loop_add+0x303/0x830 [ 1658.914838] ? loop_queue_rq+0x280/0x280 [ 1658.914845] ? loop_queue_work+0x1e80/0x1e80 [ 1658.914854] ? trace_hardirqs_on+0x10/0x10 [ 1658.914866] loop_control_ioctl+0x11a/0x3f0 [ 1658.914874] ? loop_lookup+0x190/0x190 [ 1658.914882] ? SyS_write+0x1b7/0x210 [ 1658.914898] ? loop_lookup+0x190/0x190 [ 1658.914914] do_vfs_ioctl+0x75a/0xff0 [ 1658.914926] ? ioctl_preallocate+0x1a0/0x1a0 [ 1658.914933] ? lock_downgrade+0x740/0x740 [ 1658.914943] ? __fget+0x225/0x360 [ 1658.914952] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.914961] ? security_file_ioctl+0x83/0xb0 [ 1658.914970] SyS_ioctl+0x7f/0xb0 [ 1658.914978] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.914988] do_syscall_64+0x1d5/0x640 [ 1658.915004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.915010] RIP: 0033:0x45e219 [ 1658.915015] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.915025] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1658.915030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1658.915035] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.915040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 1658.915045] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1659.021571] FAULT_INJECTION: forcing a failure. [ 1659.021571] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.021583] CPU: 0 PID: 11500 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1659.021589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.021593] Call Trace: [ 1659.021607] dump_stack+0x1b2/0x281 [ 1659.021621] should_fail.cold+0x10a/0x149 [ 1659.021635] should_failslab+0xd6/0x130 [ 1659.021649] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1659.021664] __kmalloc_node+0x38/0x70 [ 1659.021677] blk_mq_alloc_rq_map+0xd2/0x220 [ 1659.021688] blk_mq_sched_alloc_tags+0xaa/0x240 [ 1659.021701] blk_mq_init_sched+0x18d/0x4a0 [ 1659.021710] ? _raw_spin_unlock+0x29/0x40 [ 1659.021723] elevator_init+0x2ee/0x410 [ 1659.021732] blk_mq_sched_init+0x28/0x40 [ 1659.021742] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1659.021756] blk_mq_init_queue+0x5a/0x90 [ 1659.021765] loop_add+0x303/0x830 [ 1659.021775] ? loop_queue_rq+0x280/0x280 [ 1659.021782] ? loop_queue_work+0x1e80/0x1e80 [ 1659.021793] ? trace_hardirqs_on+0x10/0x10 [ 1659.021804] loop_control_ioctl+0x11a/0x3f0 [ 1659.021813] ? loop_lookup+0x190/0x190 [ 1659.021821] ? SyS_write+0x1b7/0x210 [ 1659.021831] ? loop_lookup+0x190/0x190 [ 1659.021841] do_vfs_ioctl+0x75a/0xff0 [ 1659.021853] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.021862] ? lock_downgrade+0x740/0x740 [ 1659.021875] ? __fget+0x225/0x360 [ 1659.021885] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.021896] ? security_file_ioctl+0x83/0xb0 [ 1659.021907] SyS_ioctl+0x7f/0xb0 [ 1659.021914] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.021925] do_syscall_64+0x1d5/0x640 [ 1659.021941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.021949] RIP: 0033:0x45e219 [ 1659.021954] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.021965] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1659.021970] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1659.021976] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.021981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 1659.021987] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1659.122853] FAULT_INJECTION: forcing a failure. [ 1659.122853] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.122864] CPU: 0 PID: 11513 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1659.122870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.122873] Call Trace: [ 1659.122893] dump_stack+0x1b2/0x281 [ 1659.122907] should_fail.cold+0x10a/0x149 [ 1659.122922] should_failslab+0xd6/0x130 [ 1659.122935] kmem_cache_alloc+0x28e/0x3c0 [ 1659.122951] create_new_namespaces+0x30/0x720 [ 1659.122966] SyS_setns+0x184/0x2b0 [ 1659.122976] ? exit_task_namespaces+0x20/0x20 [ 1659.122989] do_syscall_64+0x1d5/0x640 [ 1659.123007] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.123015] RIP: 0033:0x460d07 [ 1659.123020] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1659.123030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000460d07 [ 1659.123036] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000000000ef [ 1659.123041] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.123046] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000006 [ 1659.123052] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1659.142780] FAULT_INJECTION: forcing a failure. [ 1659.142780] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.318705] FAULT_INJECTION: forcing a failure. [ 1659.318705] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.322050] CPU: 0 PID: 11514 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1659.756663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.756670] Call Trace: [ 1659.768697] dump_stack+0x1b2/0x281 [ 1659.768708] should_fail.cold+0x10a/0x149 [ 1659.768719] should_failslab+0xd6/0x130 04:37:01 executing program 4: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0xe514, 0x7, 0xb4, 0x8, 0x4, 0x4, 0x5b2}) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x35) 04:37:01 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:01 executing program 2 (fault-call:2 fault-nth:8): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1659.768729] kmem_cache_alloc+0x40/0x3c0 04:37:01 executing program 5 (fault-call:5 fault-nth:41): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1659.768741] __debug_object_init+0x578/0x7a0 04:37:01 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r0, 0x0, 0x0) [ 1659.768752] ? debug_object_destroy+0x240/0x240 04:37:01 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1659.768764] __percpu_counter_init+0xbd/0x240 [ 1659.768773] blkg_alloc+0xd7/0x5c0 [ 1659.768784] blkcg_init_queue+0x23/0x410 [ 1659.768795] blk_alloc_queue_node+0x826/0xb40 [ 1659.768805] blk_mq_init_queue+0x42/0x90 [ 1659.768812] loop_add+0x303/0x830 [ 1659.768822] ? loop_queue_rq+0x280/0x280 [ 1659.768827] ? loop_queue_work+0x1e80/0x1e80 [ 1659.768837] ? trace_hardirqs_on+0x10/0x10 [ 1659.768845] loop_control_ioctl+0x11a/0x3f0 [ 1659.768851] ? loop_lookup+0x190/0x190 [ 1659.768858] ? SyS_write+0x1b7/0x210 [ 1659.768866] ? loop_lookup+0x190/0x190 [ 1659.768874] do_vfs_ioctl+0x75a/0xff0 [ 1659.768882] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.768888] ? lock_downgrade+0x740/0x740 [ 1659.768899] ? __fget+0x225/0x360 [ 1659.768905] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.768914] ? security_file_ioctl+0x83/0xb0 [ 1659.768921] SyS_ioctl+0x7f/0xb0 04:37:01 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:01 executing program 2 (fault-call:2 fault-nth:9): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:01 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:01 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket(0x23, 0xa, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) [ 1659.768927] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.768936] do_syscall_64+0x1d5/0x640 [ 1659.768949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.768956] RIP: 0033:0x45e219 [ 1659.768960] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.768968] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1659.768972] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1659.768976] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.768979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 1659.768983] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1659.769002] CPU: 1 PID: 11521 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1659.769009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.769012] Call Trace: [ 1659.769023] dump_stack+0x1b2/0x281 [ 1659.769032] should_fail.cold+0x10a/0x149 [ 1659.769043] should_failslab+0xd6/0x130 [ 1659.769052] kmem_cache_alloc+0x28e/0x3c0 [ 1659.769064] create_new_namespaces+0x30/0x720 [ 1659.769077] SyS_setns+0x184/0x2b0 [ 1659.769085] ? exit_task_namespaces+0x20/0x20 [ 1659.769093] do_syscall_64+0x1d5/0x640 [ 1659.769106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.769112] RIP: 0033:0x460d07 [ 1659.769116] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1659.769125] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000460d07 [ 1659.769130] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 00000000000000ef [ 1659.769134] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.769139] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000007 [ 1659.769144] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1659.878823] FAULT_INJECTION: forcing a failure. [ 1659.878823] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.878834] CPU: 1 PID: 11532 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1659.878841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.878844] Call Trace: [ 1659.878859] dump_stack+0x1b2/0x281 [ 1659.878874] should_fail.cold+0x10a/0x149 [ 1659.878888] should_failslab+0xd6/0x130 [ 1659.878902] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1659.878911] ? kmem_cache_alloc+0x35f/0x3c0 [ 1659.878925] sock_alloc_inode+0x5f/0x250 [ 1659.878935] ? sock_destroy_inode+0x60/0x60 [ 1659.878944] alloc_inode+0x5d/0x170 [ 1659.878954] new_inode_pseudo+0x14/0xe0 [ 1659.878964] sock_alloc+0x3c/0x270 [ 1659.878975] __sock_create+0x8a/0x620 [ 1659.878990] SyS_socket+0xd1/0x1b0 [ 1659.879001] ? move_addr_to_kernel+0x60/0x60 [ 1659.879010] ? fput+0xb/0x140 [ 1659.879019] ? do_syscall_64+0x4c/0x640 [ 1659.879028] ? move_addr_to_kernel+0x60/0x60 [ 1659.879039] do_syscall_64+0x1d5/0x640 [ 1659.879055] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.879063] RIP: 0033:0x45e219 [ 1659.879068] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1659.879079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1659.879085] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1659.879090] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.879096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1659.879102] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1659.879125] socket: no more sockets [ 1659.964638] FAULT_INJECTION: forcing a failure. [ 1659.964638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1660.034468] FAULT_INJECTION: forcing a failure. [ 1660.034468] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.040280] CPU: 1 PID: 11534 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1660.359468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.359472] Call Trace: [ 1660.359491] dump_stack+0x1b2/0x281 [ 1660.359501] should_fail.cold+0x10a/0x149 [ 1660.359517] __alloc_pages_nodemask+0x22c/0x2720 [ 1660.359523] ? kasan_kmalloc+0xeb/0x160 [ 1660.359531] ? blk_mq_alloc_rq_map+0x113/0x220 [ 1660.359537] ? blk_mq_sched_alloc_tags+0xaa/0x240 [ 1660.359545] ? elevator_init+0x2ee/0x410 [ 1660.359550] ? blk_mq_sched_init+0x28/0x40 [ 1660.359556] ? blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1660.359563] ? loop_control_ioctl+0x11a/0x3f0 [ 1660.359569] ? do_vfs_ioctl+0x75a/0xff0 [ 1660.359576] ? do_syscall_64+0x1d5/0x640 [ 1660.359585] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.359592] ? __mutex_unlock_slowpath+0x75/0x770 [ 1660.359599] ? fs_reclaim_release+0xd0/0x110 [ 1660.359607] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1660.359619] ? __lockdep_init_map+0x100/0x560 [ 1660.359626] ? _find_next_bit+0xdb/0x100 [ 1660.359636] ? __cpu_to_node+0x7b/0xa0 [ 1660.359643] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 1660.359650] blk_mq_alloc_rqs+0x227/0x6d0 [ 1660.359660] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 1660.359668] blk_mq_sched_alloc_tags+0x112/0x240 [ 1660.359676] blk_mq_init_sched+0x18d/0x4a0 [ 1660.359683] ? _raw_spin_unlock+0x29/0x40 [ 1660.359692] elevator_init+0x2ee/0x410 [ 1660.359699] blk_mq_sched_init+0x28/0x40 [ 1660.359706] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1660.359716] blk_mq_init_queue+0x5a/0x90 [ 1660.359722] loop_add+0x303/0x830 [ 1660.359731] ? loop_queue_rq+0x280/0x280 [ 1660.359736] ? loop_queue_work+0x1e80/0x1e80 [ 1660.359743] ? trace_hardirqs_on+0x10/0x10 [ 1660.359751] loop_control_ioctl+0x11a/0x3f0 [ 1660.359757] ? loop_lookup+0x190/0x190 [ 1660.359763] ? SyS_write+0x1b7/0x210 [ 1660.359770] ? loop_lookup+0x190/0x190 [ 1660.359777] do_vfs_ioctl+0x75a/0xff0 [ 1660.359785] ? ioctl_preallocate+0x1a0/0x1a0 [ 1660.359791] ? lock_downgrade+0x740/0x740 [ 1660.359800] ? __fget+0x225/0x360 [ 1660.359807] ? do_vfs_ioctl+0xff0/0xff0 [ 1660.359814] ? security_file_ioctl+0x83/0xb0 [ 1660.359822] SyS_ioctl+0x7f/0xb0 [ 1660.359827] ? do_vfs_ioctl+0xff0/0xff0 [ 1660.359834] do_syscall_64+0x1d5/0x640 [ 1660.359845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.359851] RIP: 0033:0x45e219 [ 1660.359855] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1660.359863] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1660.359867] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1660.359871] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.359874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1660.359879] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1660.359896] CPU: 0 PID: 11551 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1660.359902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.359905] Call Trace: [ 1660.359915] dump_stack+0x1b2/0x281 [ 1660.359925] should_fail.cold+0x10a/0x149 [ 1660.359936] should_failslab+0xd6/0x130 [ 1660.359948] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1660.359956] ? kmem_cache_alloc+0x35f/0x3c0 [ 1660.359967] sock_alloc_inode+0x5f/0x250 [ 1660.359975] ? sock_destroy_inode+0x60/0x60 [ 1660.359983] alloc_inode+0x5d/0x170 [ 1660.359992] new_inode_pseudo+0x14/0xe0 [ 1660.360001] sock_alloc+0x3c/0x270 [ 1660.360017] __sock_create+0x8a/0x620 [ 1660.360031] SyS_socket+0xd1/0x1b0 [ 1660.360042] ? move_addr_to_kernel+0x60/0x60 [ 1660.360051] ? fput+0xb/0x140 [ 1660.360058] ? do_syscall_64+0x4c/0x640 [ 1660.360067] ? move_addr_to_kernel+0x60/0x60 [ 1660.360076] do_syscall_64+0x1d5/0x640 [ 1660.360091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.360097] RIP: 0033:0x45e219 [ 1660.360101] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1660.360111] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1660.360116] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1660.360121] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.360126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1660.360132] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c 04:37:02 executing program 3: r0 = socket(0x29, 0x5, 0x5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000040)) 04:37:02 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:37:02 executing program 5 (fault-call:5 fault-nth:42): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:02 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1660.382575] socket: no more sockets 04:37:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x21, 0x7, 0x46, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, 0x7, 0x0, 0x8, 0xffffffff}}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, 0x0, 0x35) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x2f, 0x4, 0x20, 0x0, 0x40, @private2, @loopback, 0x40, 0x20, 0x7fffffff, 0x1}}) 04:37:02 executing program 2 (fault-call:2 fault-nth:10): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:02 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 04:37:02 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:02 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 1660.833980] FAULT_INJECTION: forcing a failure. [ 1660.833980] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.845463] CPU: 1 PID: 11578 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1660.853345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.862697] Call Trace: [ 1660.865298] dump_stack+0x1b2/0x281 [ 1660.868939] should_fail.cold+0x10a/0x149 [ 1660.873090] should_failslab+0xd6/0x130 [ 1660.877065] __kmalloc+0x6d/0x400 04:37:02 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3a579d613f9e6232b7b20763b3e14a876efcc8765dec1c6f0b7bf473174c14bc3aeb8a40f398fe6529310a3a732ba08b6473ce27a6383dad1616f5e412535af", 0x40) socket(0x29, 0x5, 0x5) 04:37:02 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 1660.880515] ? sk_prot_alloc+0x1ba/0x290 [ 1660.884577] sk_prot_alloc+0x1ba/0x290 [ 1660.888466] sk_alloc+0x36/0xcd0 [ 1660.891833] rawsock_create+0x123/0x500 [ 1660.895808] nfc_sock_create+0x108/0x1d0 [ 1660.899867] __sock_create+0x303/0x620 [ 1660.903764] SyS_socket+0xd1/0x1b0 [ 1660.907618] ? move_addr_to_kernel+0x60/0x60 [ 1660.907629] ? fput+0xb/0x140 [ 1660.907639] ? do_syscall_64+0x4c/0x640 04:37:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_ext={0x1c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="3f94e0fffeffffff080671ff00000000950000000900000005397eff100000007cb6020008000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x6, &(0x7f0000000080)=""/6, 0x80100, 0x18, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x9}, 0x10, 0x29905, r0}, 0x78) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0x67, 0x1, [], [@ra, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x7ff}]}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @broadcast}, 0x41}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r2, 0x0, 0x35) 04:37:02 executing program 2 (fault-call:2 fault-nth:11): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1660.907649] ? move_addr_to_kernel+0x60/0x60 [ 1660.907660] do_syscall_64+0x1d5/0x640 [ 1660.907677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.907685] RIP: 0033:0x45e219 [ 1660.907690] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 04:37:02 executing program 5 (fault-call:5 fault-nth:43): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:02 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xffffffffffffff17) 04:37:02 executing program 2 (fault-call:2 fault-nth:12): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1660.907701] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1660.907707] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1660.907712] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.907718] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1660.907724] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1660.951067] FAULT_INJECTION: forcing a failure. [ 1660.951067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1660.951079] CPU: 1 PID: 11586 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1660.951084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.951088] Call Trace: [ 1660.951102] dump_stack+0x1b2/0x281 [ 1660.951118] should_fail.cold+0x10a/0x149 [ 1660.951133] __alloc_pages_nodemask+0x22c/0x2720 [ 1660.951142] ? kasan_kmalloc+0xeb/0x160 [ 1660.951154] ? blk_mq_alloc_rq_map+0x113/0x220 [ 1660.951163] ? blk_mq_sched_alloc_tags+0xaa/0x240 [ 1660.951172] ? elevator_init+0x2ee/0x410 [ 1660.951183] ? loop_control_ioctl+0x11a/0x3f0 [ 1660.951190] ? do_vfs_ioctl+0x75a/0xff0 [ 1660.951198] ? do_syscall_64+0x1d5/0x640 [ 1660.951208] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.951217] ? __mutex_unlock_slowpath+0x75/0x770 [ 1660.951227] ? fs_reclaim_release+0xd0/0x110 [ 1660.951238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1660.951257] ? __lockdep_init_map+0x100/0x560 [ 1660.951266] ? _find_next_bit+0xdb/0x100 [ 1660.951277] ? __cpu_to_node+0x7b/0xa0 [ 1660.951286] ? memset+0x20/0x40 [ 1660.951297] blk_mq_alloc_rqs+0x227/0x6d0 [ 1660.951313] blk_mq_sched_alloc_tags+0x112/0x240 [ 1660.951325] blk_mq_init_sched+0x18d/0x4a0 [ 1660.951334] ? _raw_spin_unlock+0x29/0x40 [ 1660.951346] elevator_init+0x2ee/0x410 [ 1660.951356] blk_mq_sched_init+0x28/0x40 [ 1660.951365] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1660.951380] blk_mq_init_queue+0x5a/0x90 [ 1660.951388] loop_add+0x303/0x830 [ 1660.951400] ? loop_queue_rq+0x280/0x280 [ 1660.951407] ? loop_queue_work+0x1e80/0x1e80 [ 1660.951426] ? trace_hardirqs_on+0x10/0x10 [ 1660.951438] loop_control_ioctl+0x11a/0x3f0 [ 1660.951448] ? loop_lookup+0x190/0x190 [ 1660.951456] ? SyS_write+0x1b7/0x210 [ 1660.951468] ? loop_lookup+0x190/0x190 [ 1660.951479] do_vfs_ioctl+0x75a/0xff0 [ 1660.951489] ? ioctl_preallocate+0x1a0/0x1a0 [ 1660.951497] ? lock_downgrade+0x740/0x740 [ 1660.951510] ? __fget+0x225/0x360 [ 1660.951519] ? do_vfs_ioctl+0xff0/0xff0 [ 1660.951528] ? security_file_ioctl+0x83/0xb0 [ 1660.951538] SyS_ioctl+0x7f/0xb0 [ 1660.951545] ? do_vfs_ioctl+0xff0/0xff0 [ 1660.951556] do_syscall_64+0x1d5/0x640 [ 1660.951570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1660.951578] RIP: 0033:0x45e219 [ 1660.951583] RSP: 002b:00007fb2e3616c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1660.951592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1660.951596] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1660.951601] RBP: 00007fb2e3616ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.951607] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 1660.951613] R13: 00007ffcdea25b5f R14: 00007fb2e36179c0 R15: 000000000119c034 [ 1661.002495] FAULT_INJECTION: forcing a failure. [ 1661.002495] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.002506] CPU: 0 PID: 11600 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1661.002512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.002515] Call Trace: [ 1661.002531] dump_stack+0x1b2/0x281 [ 1661.002546] should_fail.cold+0x10a/0x149 [ 1661.002561] should_failslab+0xd6/0x130 [ 1661.002574] kmem_cache_alloc+0x28e/0x3c0 [ 1661.002587] __d_alloc+0x2a/0xa20 [ 1661.002603] sock_alloc_file+0xc8/0x2e0 [ 1661.002612] ? sock_poll+0x220/0x220 [ 1661.002628] SyS_socket+0x108/0x1b0 [ 1661.002639] ? move_addr_to_kernel+0x60/0x60 [ 1661.002649] ? do_syscall_64+0x4c/0x640 [ 1661.002659] ? move_addr_to_kernel+0x60/0x60 [ 1661.002668] do_syscall_64+0x1d5/0x640 [ 1661.002684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.002692] RIP: 0033:0x45e219 [ 1661.002697] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1661.002707] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1661.002713] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1661.002718] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.002723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1661.002729] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c 04:37:03 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1661.045345] FAULT_INJECTION: forcing a failure. [ 1661.045345] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.449412] CPU: 0 PID: 11610 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1661.449419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:37:03 executing program 5 (fault-call:5 fault-nth:44): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:03 executing program 2 (fault-call:2 fault-nth:13): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1661.449422] Call Trace: [ 1661.449445] dump_stack+0x1b2/0x281 [ 1661.449459] should_fail.cold+0x10a/0x149 [ 1661.449472] should_failslab+0xd6/0x130 [ 1661.449485] kmem_cache_alloc+0x28e/0x3c0 [ 1661.449498] get_empty_filp+0x86/0x3e0 [ 1661.449508] alloc_file+0x23/0x440 [ 1661.449522] sock_alloc_file+0x113/0x2e0 04:37:03 executing program 5 (fault-call:5 fault-nth:45): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:03 executing program 2 (fault-call:2 fault-nth:14): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1661.449531] ? sock_poll+0x220/0x220 [ 1661.449546] SyS_socket+0x108/0x1b0 [ 1661.449556] ? move_addr_to_kernel+0x60/0x60 [ 1661.449566] ? do_syscall_64+0x4c/0x640 [ 1661.449575] ? move_addr_to_kernel+0x60/0x60 [ 1661.449585] do_syscall_64+0x1d5/0x640 [ 1661.449601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.449608] RIP: 0033:0x45e219 [ 1661.449613] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1661.449623] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1661.449627] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1661.449631] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.449636] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1661.449641] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1661.472459] FAULT_INJECTION: forcing a failure. [ 1661.472459] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.472470] CPU: 0 PID: 11612 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1661.472476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.472480] Call Trace: [ 1661.472496] dump_stack+0x1b2/0x281 [ 1661.472510] should_fail.cold+0x10a/0x149 [ 1661.472525] should_failslab+0xd6/0x130 [ 1661.472539] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1661.472554] elevator_alloc+0x7a/0x1f0 [ 1661.472566] dd_init_queue+0x20/0x420 [ 1661.472579] blk_mq_init_sched+0x214/0x4a0 [ 1661.472591] ? _raw_spin_unlock+0x29/0x40 [ 1661.472605] elevator_init+0x2ee/0x410 [ 1661.472615] blk_mq_sched_init+0x28/0x40 [ 1661.472626] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1661.472641] blk_mq_init_queue+0x5a/0x90 [ 1661.472651] loop_add+0x303/0x830 [ 1661.472663] ? loop_queue_rq+0x280/0x280 [ 1661.472670] ? loop_queue_work+0x1e80/0x1e80 [ 1661.472681] ? trace_hardirqs_on+0x10/0x10 [ 1661.472692] loop_control_ioctl+0x11a/0x3f0 [ 1661.472700] ? loop_lookup+0x190/0x190 [ 1661.472709] ? SyS_write+0x1b7/0x210 [ 1661.472721] ? loop_lookup+0x190/0x190 [ 1661.472731] do_vfs_ioctl+0x75a/0xff0 [ 1661.472743] ? ioctl_preallocate+0x1a0/0x1a0 [ 1661.472752] ? lock_downgrade+0x740/0x740 [ 1661.472765] ? __fget+0x225/0x360 [ 1661.472775] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.472786] ? security_file_ioctl+0x83/0xb0 [ 1661.472796] SyS_ioctl+0x7f/0xb0 [ 1661.472804] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.472816] do_syscall_64+0x1d5/0x640 [ 1661.472832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.472840] RIP: 0033:0x45e219 [ 1661.472845] RSP: 002b:00007fb2e3616c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.472855] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1661.472861] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1661.472866] RBP: 00007fb2e3616ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.472871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 1661.472877] R13: 00007ffcdea25b5f R14: 00007fb2e36179c0 R15: 000000000119c034 [ 1661.536720] FAULT_INJECTION: forcing a failure. [ 1661.536720] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.536731] CPU: 1 PID: 11627 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1661.536737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.536740] Call Trace: [ 1661.536756] dump_stack+0x1b2/0x281 [ 1661.536771] should_fail.cold+0x10a/0x149 [ 1661.536785] should_failslab+0xd6/0x130 [ 1661.536799] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1661.536815] apparmor_file_alloc_security+0x129/0x800 [ 1661.536828] security_file_alloc+0x66/0xa0 [ 1661.536837] ? selinux_is_enabled+0x5/0x50 [ 1661.536848] get_empty_filp+0x15c/0x3e0 [ 1661.536858] alloc_file+0x23/0x440 [ 1661.536872] sock_alloc_file+0x113/0x2e0 [ 1661.536881] ? sock_poll+0x220/0x220 [ 1661.536908] SyS_socket+0x108/0x1b0 [ 1661.536920] ? move_addr_to_kernel+0x60/0x60 [ 1661.536932] ? do_syscall_64+0x4c/0x640 [ 1661.536942] ? move_addr_to_kernel+0x60/0x60 [ 1661.536952] do_syscall_64+0x1d5/0x640 [ 1661.536969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.536977] RIP: 0033:0x45e219 [ 1661.536982] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1661.536992] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1661.536997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 1661.537001] RBP: 00007f00928ddca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.537007] FAULT_INJECTION: forcing a failure. [ 1661.537007] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.537010] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 1661.537014] R13: 00007fff48df2dcf R14: 00007f00928de9c0 R15: 000000000119bf8c [ 1661.537030] CPU: 0 PID: 11626 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1661.537036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.537039] Call Trace: [ 1661.537049] dump_stack+0x1b2/0x281 [ 1661.537060] should_fail.cold+0x10a/0x149 [ 1661.537072] should_failslab+0xd6/0x130 [ 1661.537084] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1661.537098] dd_init_queue+0x94/0x420 [ 1661.537110] blk_mq_init_sched+0x214/0x4a0 [ 1661.537120] ? _raw_spin_unlock+0x29/0x40 [ 1661.537136] elevator_init+0x2ee/0x410 [ 1661.537146] blk_mq_sched_init+0x28/0x40 [ 1661.537156] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 1661.537170] blk_mq_init_queue+0x5a/0x90 [ 1661.537179] loop_add+0x303/0x830 [ 1661.537190] ? loop_queue_rq+0x280/0x280 [ 1661.537205] ? loop_queue_work+0x1e80/0x1e80 [ 1661.537217] ? trace_hardirqs_on+0x10/0x10 [ 1661.537229] loop_control_ioctl+0x11a/0x3f0 [ 1661.537238] ? loop_lookup+0x190/0x190 [ 1661.537247] ? SyS_write+0x1b7/0x210 [ 1661.537258] ? loop_lookup+0x190/0x190 [ 1661.537268] do_vfs_ioctl+0x75a/0xff0 [ 1661.537280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1661.537288] ? lock_downgrade+0x740/0x740 [ 1661.537301] ? __fget+0x225/0x360 [ 1661.537310] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.537319] ? security_file_ioctl+0x83/0xb0 [ 1661.537328] SyS_ioctl+0x7f/0xb0 [ 1661.537336] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.537345] do_syscall_64+0x1d5/0x640 [ 1661.537360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.537367] RIP: 0033:0x45e219 [ 1661.537371] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.537381] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1661.537386] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1661.537398] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.537403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 1661.537409] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1661.572040] FAULT_INJECTION: forcing a failure. [ 1661.572040] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.572052] CPU: 0 PID: 11632 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1661.572058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.572062] Call Trace: [ 1661.572078] dump_stack+0x1b2/0x281 [ 1661.572092] should_fail.cold+0x10a/0x149 [ 1661.572106] should_failslab+0xd6/0x130 [ 1661.572120] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1661.572137] alloc_disk_node+0x5d/0x3d0 [ 1661.572149] loop_add+0x3cb/0x830 [ 1661.572161] ? loop_queue_rq+0x280/0x280 [ 1661.572168] ? loop_queue_work+0x1e80/0x1e80 [ 1661.572179] ? trace_hardirqs_on+0x10/0x10 [ 1661.572191] loop_control_ioctl+0x11a/0x3f0 [ 1661.572200] ? loop_lookup+0x190/0x190 [ 1661.572208] ? SyS_write+0x1b7/0x210 [ 1661.572220] ? loop_lookup+0x190/0x190 [ 1661.572230] do_vfs_ioctl+0x75a/0xff0 [ 1661.572242] ? ioctl_preallocate+0x1a0/0x1a0 [ 1661.572251] ? lock_downgrade+0x740/0x740 [ 1661.572265] ? __fget+0x225/0x360 [ 1661.572275] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.572285] ? security_file_ioctl+0x83/0xb0 [ 1661.572296] SyS_ioctl+0x7f/0xb0 [ 1661.572304] ? do_vfs_ioctl+0xff0/0xff0 [ 1661.572315] do_syscall_64+0x1d5/0x640 [ 1661.572332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.572339] RIP: 0033:0x45e219 [ 1661.572344] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1661.572354] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1661.572360] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1661.572365] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.572371] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 1661.572376] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1661.582922] FAULT_INJECTION: forcing a failure. [ 1661.582922] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.582933] CPU: 1 PID: 11633 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1661.582940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.582943] Call Trace: [ 1661.582959] dump_stack+0x1b2/0x281 [ 1661.582974] should_fail.cold+0x10a/0x149 [ 1661.582988] should_failslab+0xd6/0x130 [ 1661.583002] kmem_cache_alloc+0x28e/0x3c0 [ 1661.583015] create_new_namespaces+0x30/0x720 [ 1661.583030] SyS_setns+0x184/0x2b0 [ 1661.583039] ? exit_task_namespaces+0x20/0x20 [ 1661.583051] do_syscall_64+0x1d5/0x640 [ 1661.583066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1661.583074] RIP: 0033:0x460d07 [ 1661.583079] RSP: 002b:00007f00928ddc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1661.583088] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000460d07 [ 1661.583092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:37:04 executing program 3: socket(0x29, 0x5, 0x5) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/239, 0xef}], 0x6, &(0x7f0000000440)=""/195, 0xc3}, 0x2) 04:37:04 executing program 5 (fault-call:5 fault-nth:46): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:04 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0x40002) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)={0x7e, ""/126}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000100)={0x3, 0x7f}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r2, 0x4) 04:37:04 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:04 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x7, 0x36, 0x0, 0x10, @mcast1, @remote, 0x700, 0x8000, 0xfffffff9, 0x5}}) connect$nfc_raw(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={r2}) 04:37:04 executing program 1: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0xffffffffffffff17) [ 1661.583097] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1661.583102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00928de6d4 [ 1661.583107] R13: 000000000000000e R14: 00007f00928de9c0 R15: 000000000119bf8c 04:37:04 executing program 3: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040)=@hopopts={0x88, 0x3, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2c}}, @pad1]}, 0x28) socket(0x29, 0x5, 0x5) 04:37:04 executing program 0: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 04:37:04 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12c02, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1662.525311] FAULT_INJECTION: forcing a failure. [ 1662.525311] name failslab, interval 1, probability 0, space 0, times 0 04:37:04 executing program 3: r0 = socket(0x29, 0x5, 0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x3f, 0x3, 0x3, 0x48, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x20, 0xfffffff7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x2f, 0xff, 0x4, 0x6, 0x32, @dev={0xfe, 0x80, [], 0x10}, @mcast2, 0x80, 0x1, 0x9, 0x4}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@empty, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x5, 0x10, 0x0, 0x500, 0x238, 0x200020, r1}) 04:37:04 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 1662.574150] CPU: 0 PID: 11640 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1662.582067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.591449] Call Trace: [ 1662.594043] dump_stack+0x1b2/0x281 [ 1662.597770] should_fail.cold+0x10a/0x149 [ 1662.601923] should_failslab+0xd6/0x130 [ 1662.605914] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1662.605929] __kmalloc_node+0x38/0x70 04:37:04 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0xfdc, 0x28, @private0, @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x7800, 0x3, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', r0, 0x29, 0xc7, 0x4, 0x20, 0x20, @private2={0xfc, 0x2, [], 0x1}, @mcast2, 0x8, 0x700, 0x7fffffff}}) socket(0x29, 0x5, 0x5) 04:37:04 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60000002, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) [ 1662.605943] disk_expand_part_tbl+0x17a/0x340 [ 1662.605958] alloc_disk_node+0xf1/0x3d0 [ 1662.605969] loop_add+0x3cb/0x830 [ 1662.605982] ? loop_queue_rq+0x280/0x280 04:37:04 executing program 5 (fault-call:5 fault-nth:47): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 04:37:04 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 04:37:04 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) socket(0x29, 0x5, 0x5) socket$inet6(0xa, 0x1, 0x8) [ 1662.605990] ? loop_queue_work+0x1e80/0x1e80 [ 1662.606002] ? trace_hardirqs_on+0x10/0x10 [ 1662.606014] loop_control_ioctl+0x11a/0x3f0 [ 1662.606023] ? loop_lookup+0x190/0x190 [ 1662.606032] ? SyS_write+0x1b7/0x210 04:37:04 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 04:37:04 executing program 2: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000000c0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)="5b16389dd2a0c7c31b072d2c39a6a57b306075c696278924997f497fc1ee9cad9a00d7a7337b6d8f290fbfe71cfad814e12d06bf698f3fd63e82866749a613aa2e9885b9"}, 0x20) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) [ 1662.606044] ? loop_lookup+0x190/0x190 04:37:04 executing program 5 (fault-call:5 fault-nth:48): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1662.606054] do_vfs_ioctl+0x75a/0xff0 [ 1662.606067] ? ioctl_preallocate+0x1a0/0x1a0 [ 1662.606075] ? lock_downgrade+0x740/0x740 [ 1662.606089] ? __fget+0x225/0x360 [ 1662.606099] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.606110] ? security_file_ioctl+0x83/0xb0 [ 1662.606121] SyS_ioctl+0x7f/0xb0 [ 1662.606128] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.606140] do_syscall_64+0x1d5/0x640 [ 1662.606159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.606166] RIP: 0033:0x45e219 [ 1662.606171] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.606182] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1662.606188] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.606193] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.606199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 1662.606204] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1662.742436] FAULT_INJECTION: forcing a failure. [ 1662.742436] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.742449] CPU: 0 PID: 11676 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1662.742455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.742459] Call Trace: [ 1662.742474] dump_stack+0x1b2/0x281 [ 1662.742489] should_fail.cold+0x10a/0x149 [ 1662.742503] should_failslab+0xd6/0x130 [ 1662.742517] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1662.742530] rand_initialize_disk+0x3b/0xc0 [ 1662.742542] alloc_disk_node+0x1f7/0x3d0 [ 1662.742553] loop_add+0x3cb/0x830 [ 1662.742563] ? loop_queue_rq+0x280/0x280 [ 1662.742569] ? loop_queue_work+0x1e80/0x1e80 [ 1662.742580] ? trace_hardirqs_on+0x10/0x10 [ 1662.742592] loop_control_ioctl+0x11a/0x3f0 [ 1662.742600] ? loop_lookup+0x190/0x190 [ 1662.742609] ? SyS_write+0x1b7/0x210 [ 1662.742620] ? loop_lookup+0x190/0x190 [ 1662.742629] do_vfs_ioctl+0x75a/0xff0 [ 1662.742639] ? ioctl_preallocate+0x1a0/0x1a0 [ 1662.742646] ? lock_downgrade+0x740/0x740 [ 1662.742660] ? __fget+0x225/0x360 [ 1662.742669] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.742678] ? security_file_ioctl+0x83/0xb0 [ 1662.742689] SyS_ioctl+0x7f/0xb0 [ 1662.742696] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.742707] do_syscall_64+0x1d5/0x640 [ 1662.742723] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.742731] RIP: 0033:0x45e219 [ 1662.742736] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.742746] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1662.742750] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.742755] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.742760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 1662.742765] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1662.826215] FAULT_INJECTION: forcing a failure. [ 1662.826215] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.826227] CPU: 1 PID: 11691 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1662.826233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.826236] Call Trace: [ 1662.826253] dump_stack+0x1b2/0x281 [ 1662.826267] should_fail.cold+0x10a/0x149 [ 1662.826281] should_failslab+0xd6/0x130 [ 1662.826294] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1662.826304] ? __lock_acquire+0x5fc/0x3f20 [ 1662.826319] device_create_groups_vargs+0x7b/0x250 [ 1662.826333] device_create_vargs+0x3a/0x50 [ 1662.826347] bdi_register_va.part.0+0x35/0x650 [ 1662.826360] bdi_register+0x101/0x110 [ 1662.826370] ? bdi_register_va+0x80/0x80 [ 1662.826383] ? vsnprintf+0x260/0x1340 [ 1662.826398] bdi_register_owner+0x59/0xf0 [ 1662.826411] device_add_disk+0x5bb/0xdc0 [ 1662.826421] ? sprintf+0xa7/0xd0 [ 1662.826432] ? blk_alloc_devt+0x310/0x310 [ 1662.826443] ? __lockdep_init_map+0x100/0x560 [ 1662.826453] ? __lockdep_init_map+0x100/0x560 [ 1662.826465] loop_add+0x615/0x830 [ 1662.826477] ? loop_queue_rq+0x280/0x280 [ 1662.826485] ? loop_queue_work+0x1e80/0x1e80 [ 1662.826494] ? trace_hardirqs_on+0x10/0x10 [ 1662.826507] loop_control_ioctl+0x11a/0x3f0 [ 1662.826515] ? loop_lookup+0x190/0x190 [ 1662.826524] ? SyS_write+0x1b7/0x210 [ 1662.826535] ? loop_lookup+0x190/0x190 [ 1662.826546] do_vfs_ioctl+0x75a/0xff0 [ 1662.826558] ? ioctl_preallocate+0x1a0/0x1a0 [ 1662.826566] ? lock_downgrade+0x740/0x740 [ 1662.826580] ? __fget+0x225/0x360 [ 1662.826589] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.826599] ? security_file_ioctl+0x83/0xb0 [ 1662.826610] SyS_ioctl+0x7f/0xb0 [ 1662.826618] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.826629] do_syscall_64+0x1d5/0x640 [ 1662.826645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.826653] RIP: 0033:0x45e219 [ 1662.826659] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.826669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1662.826675] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.826680] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.826685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 1662.826691] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1662.834227] kasan: CONFIG_KASAN_INLINE enabled [ 1662.834284] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1662.834294] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1662.834298] Modules linked in: [ 1662.834309] CPU: 1 PID: 11691 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1662.834315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.834321] task: ffff88809b8620c0 task.stack: ffff8880a2ee8000 [ 1662.834334] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120 [ 1662.834338] RSP: 0018:ffff8880a2eefb48 EFLAGS: 00010202 [ 1662.834346] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000000f8c [ 1662.834351] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040 [ 1662.834357] RBP: ffffffff87cb9b60 R08: ffffffff8b991720 R09: 00000000000400c6 [ 1662.834363] R10: ffff88809b862970 R11: ffff88809b8620c0 R12: ffff8880aed3dee0 [ 1662.834368] R13: ffffffff87cb9b60 R14: 0000000000000001 R15: ffff88809a97f65c [ 1662.834375] FS: 00007fb2e3638700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 1662.834380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1662.834385] CR2: 0000001b30a22000 CR3: 00000000af31f000 CR4: 00000000001406e0 [ 1662.834395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1662.834400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1662.834402] Call Trace: [ 1662.834412] sysfs_create_link+0x5f/0xc0 [ 1662.834422] device_add_disk+0x9f8/0xdc0 [ 1662.834433] ? sprintf+0xa7/0xd0 [ 1662.834442] ? blk_alloc_devt+0x310/0x310 [ 1662.834452] ? __lockdep_init_map+0x100/0x560 [ 1662.834462] ? __lockdep_init_map+0x100/0x560 [ 1662.834473] loop_add+0x615/0x830 [ 1662.834482] ? loop_queue_rq+0x280/0x280 [ 1662.834489] ? loop_queue_work+0x1e80/0x1e80 [ 1662.834497] ? trace_hardirqs_on+0x10/0x10 [ 1662.834505] loop_control_ioctl+0x11a/0x3f0 [ 1662.834513] ? loop_lookup+0x190/0x190 [ 1662.834521] ? SyS_write+0x1b7/0x210 [ 1662.834528] ? loop_lookup+0x190/0x190 [ 1662.834536] do_vfs_ioctl+0x75a/0xff0 [ 1662.834544] ? ioctl_preallocate+0x1a0/0x1a0 [ 1662.834551] ? lock_downgrade+0x740/0x740 [ 1662.834559] ? __fget+0x225/0x360 [ 1662.834566] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.834575] ? security_file_ioctl+0x83/0xb0 [ 1662.834582] SyS_ioctl+0x7f/0xb0 [ 1662.834589] ? do_vfs_ioctl+0xff0/0xff0 [ 1662.834598] do_syscall_64+0x1d5/0x640 [ 1662.834617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1662.834623] RIP: 0033:0x45e219 [ 1662.834627] RSP: 002b:00007fb2e3637c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.834635] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1662.834640] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.834645] RBP: 00007fb2e3637ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.834649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 1662.834655] R13: 00007ffcdea25b5f R14: 00007fb2e36389c0 R15: 000000000119bf8c [ 1662.834663] Code: 84 a1 00 00 00 e8 6b bf b1 ff 48 c7 c7 40 c2 04 89 e8 9f 84 7d 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 32 [ 1662.834833] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff8880a2eefb48 [ 1662.834993] ---[ end trace 565efffbb30b0492 ]--- [ 1662.834999] Kernel panic - not syncing: Fatal exception [ 1662.835546] Kernel Offset: disabled