2:24 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x118, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:25 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb801000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2d5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc4ee, 0x80000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) r6 = dup(r0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r8, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r8, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f00000008c0)=""/115, 0x73}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000ac0)=""/10, 0xa}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x7, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00'}, 0x2c) 00:32:25 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:25 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x6000000, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xba, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:25 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x236, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:25 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x20e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:25 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:26 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x61010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:26 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x31, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:26 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9b, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:26 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x224, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf1000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:28 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x132, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x15d, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:28 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback=0x7f000700, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:28 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback=0x7f000700, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 00:32:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4d, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:28 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xb8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:28 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:29 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x25, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3101000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:29 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback=0x7f000700, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:29 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback=0x7f000002, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:29 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x150, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ec, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x12000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x239, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x10b, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:31 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xb7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:31 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:31 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:31 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x100000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7a01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x228, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x271, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:31 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4c00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2f0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x16a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:32 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:32 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x11000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:32 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x100000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:32 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x74010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x103, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4e, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xb6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:33 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:33 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x8800000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xbf, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1f2, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x197, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:34 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:34 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x11000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x36000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xd5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:34 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x47, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4a, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:35 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7201000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xec, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4a, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:35 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:35 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2200, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x266, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc0000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x216, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:35 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x8800000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:35 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x8800000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:36 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf0010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1c8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:36 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0xc, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:36 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x18, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:36 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:36 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x18, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x26f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9a010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x8a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe401, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:37 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x18, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x111, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:38 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:38 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x20a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:38 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x279, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x171, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x129, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:39 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x18, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa6, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x192, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:39 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa0010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:39 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x27d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:39 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x18e, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x168, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:40 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbe01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:40 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) 00:32:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa201000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:41 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) 00:32:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 00:32:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x144, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:41 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) 00:32:41 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8701000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) 00:32:41 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:41 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1100000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x46, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) 00:32:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) 00:32:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1df, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:41 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc200000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:41 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x15, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1e9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) 00:32:41 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x15, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x27a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:42 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x8800, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7b01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:42 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:42 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x15, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:42 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x600, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:42 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1100000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1cd, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:42 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x59000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x8b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x29e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:43 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:43 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa4010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:43 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x6, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:43 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1100000000000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x24c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:43 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:43 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x8800, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8a01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:43 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x12a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:43 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x15, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:43 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x130, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:44 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x11, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x17f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x52, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x22, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x17d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x22, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) r5 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1a7, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x68, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1}, &(0x7f0000000400)=0x14) r4 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0xb, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x18e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0xb, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x6000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6301, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:44 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) r4 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x110, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x8, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") r4 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x238, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x118, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x9e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) socket(0xa, 0x2, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x22e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:45 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 00:32:45 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1100, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:45 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x3, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xcf00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2aa, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:45 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x2b, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:45 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x3, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1af, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xd6010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:46 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:46 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:46 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x3, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:46 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2301, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:46 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:46 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x2b, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:46 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x7a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:46 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x1100, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:46 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xa7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:46 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x5001000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:47 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xb5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:47 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x2b, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:47 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2d01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x13, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:47 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x5d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:47 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9b000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:47 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x8c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:47 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:47 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x23d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:48 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x83000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:48 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:48 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x6f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x87000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x94, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x93, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:48 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xa6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:48 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6c00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:48 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:49 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x297, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:49 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:49 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1e2, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xdd, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:49 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x23c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9e01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:50 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x109, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:50 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:50 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x172, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:50 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) [ 541.970311] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1f0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) [ 542.081979] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6101000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:50 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) [ 542.212321] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2d7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:51 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73688800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:51 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x146, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc4010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:51 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x205, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:51 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x0, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x255, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:51 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1ce, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x0, 0x0, 0x7c}, 0x2c) 00:32:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:52 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x214, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00'}, 0x2c) 00:32:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc701000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:52 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:52 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x17, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x48, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xd8010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 544.373372] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x212, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:53 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) delete_module(&(0x7f0000000040)='procmime_type]%\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') 00:32:53 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:53 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 00:32:53 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:53 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) [ 544.913054] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x10b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:53 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:53 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) [ 544.982453] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 00:32:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x16, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:53 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1e4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:53 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 00:32:53 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) 00:32:54 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8600, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x294, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:54 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x0, 0x1, 0x7c}, 0x2c) 00:32:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xe5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:54 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:54 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x0, 0x0, 0x7c}, 0x2c) 00:32:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x29c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8b01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:54 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00'}, 0x2c) 00:32:54 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 00:32:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xeb, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:54 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73681100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:54 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) 00:32:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xfa01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x105, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:54 executing program 5: clone(0x210007f3, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000280)) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0xb8, 0xffffffffffffffda, 0x1, [{{0x4, 0x0, 0x7fff, 0x1ff, 0x1, 0x8000, {0x0, 0xfffffffffffffffc, 0x1aa2, 0x81, 0x0, 0x9, 0x6, 0x6, 0x0, 0x3, 0xfffffffffffffb92, r1, r2, 0x5}}, {0x4, 0x0, 0xa, 0x1, '/dev/zero\x00'}}]}, 0xb8) ioctl$KDMKTONE(r0, 0x4b30, 0x4) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) get_robust_list(0xffffffffffffffff, &(0x7f0000000240)=&(0x7f0000000100)={&(0x7f00000003c0)={&(0x7f0000000340)}, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)}}, &(0x7f00000001c0)=0xc) set_mempolicy(0xd7a396d898210355, &(0x7f0000000140)=0x3, 0x3f) 00:32:55 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x26b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc200, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:55 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x323}) 00:32:55 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) 00:32:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getegid() getresgid(&(0x7f00000001c0), &(0x7f0000000600), &(0x7f0000000640)) fstat(r0, &(0x7f0000000680)) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x1}]}, 0x3c, 0x0) socketpair(0xf, 0x6, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x48}}, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x2) close(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x4000080) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 00:32:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x188, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 547.120412] audit: type=1400 audit(1537576375.418:31): avc: denied { map } for pid=30877 comm="syz-executor5" path="/dev/nullb0" dev="devtmpfs" ino=490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 00:32:55 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x28d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x5601, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getegid() getresgid(&(0x7f00000001c0), &(0x7f0000000600), &(0x7f0000000640)) fstat(r0, &(0x7f0000000680)) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x1}]}, 0x3c, 0x0) socketpair(0xf, 0x6, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x48}}, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x2) close(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x4000080) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 00:32:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2f5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1a00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:56 executing program 5: io_setup(0x40, &(0x7f0000000140)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r1, 0x0}]) 00:32:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1e3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) 00:32:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x6c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x848204) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) open$dir(&(0x7f0000000040)='./bus/file0\x00', 0x0, 0x81) pread64(r1, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) 00:32:56 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xff000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2be, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dea5d666070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0x7fffefae}, {&(0x7f0000000a00)=""/164, 0xa4}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 00:32:56 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ceph(&(0x7f0000000640)='ceph\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000001940), 0x8008, &(0x7f0000001a00)='.vmnet1cgroupem0\x00') 00:32:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xcd01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:32:56 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 548.725125] ceph: device name is missing path (no : separator in /dev/loop5) 00:32:57 executing program 5: prctl$intptr(0x10000000001d, 0xfffffffffffff872) prctl$getreaper(0x40400000000001e, &(0x7f0000000200)) 00:32:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x14e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7c01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 00:32:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x117, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2dc, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002d0019010000000000000000030000"], 0x1}}, 0x0) 00:32:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf3000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:57 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:57 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:32:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x16c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:57 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:57 executing program 5: getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x1) write$FUSE_STATFS(r0, &(0x7f0000000380)={0x60}, 0x60) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0'}, 0x4) 00:32:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x3c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1c5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc9, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:58 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:32:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x177, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x16, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1a3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x138, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb200, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:58 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:32:58 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = dup(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x251371, 0x1}, 0x3f7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 00:32:59 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:59 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7500, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:59 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x120, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6601000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:59 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x66, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1f4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:32:59 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:32:59 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:32:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8900000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1c3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:32:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x12d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2700, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x182, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:00 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x225, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:00 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:00 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x25e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8400, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:00 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x288, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2a01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:01 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x9f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:01 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:01 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x5601000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:01 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1dd, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2b00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:01 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:01 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:01 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x190, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x99000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x86, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 5: io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:02 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:02 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x23a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb801, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x13c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:02 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1df, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:02 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x247, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2101000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x274, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe4010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:03 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x5b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:03 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3c000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:03 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x201, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1a4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x187, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:03 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xce, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x192, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:04 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:04 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:04 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe400000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x157, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:04 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x8d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4e000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:04 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x60, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x52, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, &(0x7f0000000b00)) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:05 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7c000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:05 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2d3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x154, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x27010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2cb, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:05 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x14f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa1, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:05 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:05 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x169, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:06 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x15, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xd200000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:06 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:06 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1f8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe701000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:06 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:06 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:06 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x21d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:07 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3d00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:07 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0xffffffff) 00:33:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x20f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:07 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)) 00:33:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x130, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x20010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:07 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:07 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:08 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x28, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:08 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)) 00:33:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4101, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1dc, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:08 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)) 00:33:08 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4301, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2f4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:08 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:08 executing program 3: memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x22, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:08 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe301, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:08 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x3d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:08 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:33:08 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:08 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x14c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xde, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x164, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) 00:33:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1e7, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x193, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:09 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x18, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:09 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1eb, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3800, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:09 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x126, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:10 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:10 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x126, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:10 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:10 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:10 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb100000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:10 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:10 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendmmsg$unix(r1, &(0x7f0000005240), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:10 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:10 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x176, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:10 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9e01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x296, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xaa, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x15e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4f, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x152, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xd4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2a01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2ce, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:12 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1c2, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:12 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x10}], 0x10}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:12 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:12 executing program 5: socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x240, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:12 executing program 5: socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x2}) 00:33:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x76, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)) 00:33:12 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb7010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x12c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:12 executing program 5: prctl$intptr(0x1d, 0xfffffffffffffd64) prctl$getreaper(0x40400000000001e, &(0x7f0000000040)) 00:33:13 executing program 5: 00:33:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x222, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2300, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:13 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:13 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:13 executing program 5: 00:33:13 executing program 5: 00:33:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x51, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:13 executing program 5: 00:33:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xe6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3401000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:13 executing program 5: 00:33:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1d4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:13 executing program 5: 00:33:14 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:14 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x8ae, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:14 executing program 5: prctl$intptr(0x40000000001d, 0xfffffffffffffd61) prctl$getreaper(0x40400000000001e, &(0x7f0000000040)) 00:33:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x290, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb8010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:14 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000000)={0x123, 0x2}) 00:33:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ae, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:14 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7901, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1fa, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:14 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 566.368294] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1c4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7301000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:15 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:15 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x223, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 566.815434] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbb00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 567.021318] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x181, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 567.168101] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9200000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 567.295212] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 567.376562] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:15 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:15 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x16f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8f00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 567.684498] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2ef, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:16 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbd, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 567.818934] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x6b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 567.893885] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 567.995363] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:16 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9f00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x299, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:16 executing program 3: r0 = memfd_create(&(0x7f0000000180)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 00:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:16 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x289, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x10f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbf01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x27c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:17 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x143, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x20000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x100000001, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4) 00:33:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 3: prctl$intptr(0x1d, 0xfffffffffffffd5f) prctl$getreaper(0x40400000000001e, &(0x7f0000000040)) 00:33:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x187, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:17 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbb00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1b1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:18 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc6010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x50, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:18 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 570.005550] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x9d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:18 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 570.145418] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf3010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 570.317115] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 570.452819] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:18 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x99, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9e01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xec000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1f2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 570.732349] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:19 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4b010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:19 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 571.083736] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:19 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:19 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2db, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x3d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 571.350186] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x132, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:19 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:19 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x83, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1401000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x231, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:19 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xc20}) [ 571.606799] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 571.764163] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 00:33:20 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4101, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x24f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:20 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:20 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe500, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:20 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x97, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:20 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xc20}) 00:33:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x22a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:20 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x188, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:20 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 00:33:20 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 572.437250] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 00:33:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xcb, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:20 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) [ 572.606405] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 00:33:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x36, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:21 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 00:33:21 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xac1, 0x0) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffff) 00:33:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:33:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf03f1f00000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:21 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x92, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 573.018974] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 00:33:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x251, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x169, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe6000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:21 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2ed, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:21 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:33:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4e00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ce, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:21 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x117, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xd9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x26e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7a, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:22 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x136, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 00:33:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x1ce, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x29f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc5, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:22 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a3, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:22 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x11000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x140, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2f2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:23 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6900000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:23 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x11000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x170, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xc6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:23 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x11000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:23 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3c00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xde, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:23 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2801, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x27e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:24 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x133, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:24 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3c00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:24 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8500, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1d0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:24 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 0: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x88, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x26d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9c, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:24 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:24 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:25 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:25 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x11, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x14d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x139, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x13f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9c, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x29b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2701000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:26 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x8800, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x260, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x200000, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x569, 0x800}, {0xcf, 0x5}, 0x8, 0x1, 0x7f}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x101, 0x1) 00:33:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7e01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x6, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x237, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:26 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x8800000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe3, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:26 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x8800000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ac, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x127, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:27 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x8800000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2ec, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:27 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600000000000000, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2100, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x28f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x127, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xe9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:27 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x1100, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x117, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:27 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ad, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:27 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7e00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xaa, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:28 executing program 5: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 0: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:28 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:28 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf500000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1e8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000), 0x1) 00:33:28 executing program 3: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x189, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:28 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6800, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:28 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:29 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:29 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:29 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:29 executing program 5: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x600, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x87, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x269, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:29 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x6, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x801000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 581.275007] FAULT_INJECTION: forcing a failure. [ 581.275007] name failslab, interval 1, probability 0, space 0, times 0 [ 581.288280] CPU: 1 PID: 608 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 581.295397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.304758] Call Trace: [ 581.307367] dump_stack+0x1c4/0x2b4 [ 581.311009] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.316222] ? lock_release+0x970/0x970 [ 581.320224] should_fail.cold.4+0xa/0x17 00:33:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000), 0x1) [ 581.324319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.329440] ? __mutex_lock+0x85e/0x1700 [ 581.333519] ? graph_lock+0x170/0x170 [ 581.337344] ? graph_lock+0x170/0x170 [ 581.341159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.346709] ? radix_tree_descend+0x13c/0x2e0 [ 581.351228] ? find_held_lock+0x36/0x1c0 [ 581.355314] ? __lock_is_held+0xb5/0x140 [ 581.359402] ? ___might_sleep+0x1ed/0x300 [ 581.363568] ? arch_local_save_flags+0x40/0x40 [ 581.368162] ? __radix_tree_insert+0x8f0/0x8f0 [ 581.372753] ? avc_has_extended_perms+0xab2/0x15a0 [ 581.377712] __should_failslab+0x124/0x180 [ 581.381967] should_failslab+0x9/0x14 [ 581.385784] kmem_cache_alloc_trace+0x2d7/0x750 [ 581.390493] loop_add+0xa3/0xa30 [ 581.393880] ? loop_lookup+0x105/0x230 [ 581.397789] ? loop_queue_rq+0x690/0x690 [ 581.401880] loop_control_ioctl+0x199/0x530 [ 581.406221] ? loop_add+0xa30/0xa30 [ 581.409868] ? arch_local_save_flags+0x40/0x40 [ 581.414469] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 581.419429] ? loop_add+0xa30/0xa30 [ 581.423075] do_vfs_ioctl+0x1de/0x1720 [ 581.426985] ? ioctl_preallocate+0x300/0x300 [ 581.431408] ? selinux_file_mprotect+0x620/0x620 [ 581.436184] ? __sb_end_write+0xd9/0x110 [ 581.440274] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 581.445821] ? fput+0x130/0x1a0 [ 581.449114] ? do_syscall_64+0x9a/0x820 [ 581.453104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.458657] ? security_file_ioctl+0x94/0xc0 [ 581.463081] ksys_ioctl+0xa9/0xd0 [ 581.466551] __x64_sys_ioctl+0x73/0xb0 [ 581.470452] do_syscall_64+0x1b9/0x820 [ 581.474362] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 581.479737] ? syscall_return_slowpath+0x5e0/0x5e0 [ 581.484685] ? trace_hardirqs_on_caller+0x310/0x310 [ 581.489718] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 581.494747] ? recalc_sigpending_tsk+0x180/0x180 [ 581.499523] ? kasan_check_write+0x14/0x20 [ 581.503781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.508645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.513842] RIP: 0033:0x457679 [ 581.517050] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.535956] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.543673] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 581.550947] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 581.558225] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.565516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 581.572794] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000000 00:33:30 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:30 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x29, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:30 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe7010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 581.845591] FAULT_INJECTION: forcing a failure. [ 581.845591] name failslab, interval 1, probability 0, space 0, times 0 [ 581.862014] CPU: 0 PID: 630 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 581.869134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.878496] Call Trace: [ 581.881102] dump_stack+0x1c4/0x2b4 [ 581.884756] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.889965] ? plist_requeue+0x620/0x620 00:33:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x7, &(0x7f0000000000)=0x101, 0x1) [ 581.894052] should_fail.cold.4+0xa/0x17 [ 581.898124] ? delete_node+0x30e/0xd20 [ 581.902029] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.907149] ? graph_lock+0x170/0x170 [ 581.910964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.916511] ? graph_lock+0x170/0x170 [ 581.920321] ? find_held_lock+0x36/0x1c0 [ 581.924406] ? __lock_is_held+0xb5/0x140 [ 581.928509] ? ___might_sleep+0x1ed/0x300 [ 581.932676] ? arch_local_save_flags+0x40/0x40 [ 581.937268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.942907] ? node_tag_clear+0xc2/0x1c0 [ 581.946991] __should_failslab+0x124/0x180 [ 581.951245] should_failslab+0x9/0x14 [ 581.955053] kmem_cache_alloc_node_trace+0x270/0x740 [ 581.960144] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 581.964978] __kmalloc_node+0x33/0x70 [ 581.968786] blk_mq_alloc_tag_set+0x385/0xad0 [ 581.973275] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.978803] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 581.983985] loop_add+0x2c9/0xa30 [ 581.987443] ? loop_queue_rq+0x690/0x690 [ 581.991504] loop_control_ioctl+0x199/0x530 [ 581.995815] ? loop_add+0xa30/0xa30 [ 581.999429] ? arch_local_save_flags+0x40/0x40 [ 582.004052] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 582.008972] ? loop_add+0xa30/0xa30 [ 582.012588] do_vfs_ioctl+0x1de/0x1720 [ 582.016467] ? ioctl_preallocate+0x300/0x300 [ 582.020890] ? selinux_file_mprotect+0x620/0x620 [ 582.025639] ? __sb_end_write+0xd9/0x110 [ 582.029688] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 582.035208] ? fput+0x130/0x1a0 [ 582.038474] ? do_syscall_64+0x9a/0x820 [ 582.042448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.047973] ? security_file_ioctl+0x94/0xc0 [ 582.052370] ksys_ioctl+0xa9/0xd0 [ 582.055812] __x64_sys_ioctl+0x73/0xb0 [ 582.059688] do_syscall_64+0x1b9/0x820 [ 582.063561] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 582.068912] ? syscall_return_slowpath+0x5e0/0x5e0 [ 582.073828] ? trace_hardirqs_on_caller+0x310/0x310 [ 582.078833] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 582.083836] ? recalc_sigpending_tsk+0x180/0x180 [ 582.088592] ? kasan_check_write+0x14/0x20 [ 582.092842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.097708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.103008] RIP: 0033:0x457679 [ 582.106205] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.125105] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.132798] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 00:33:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2df, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x6, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 582.140048] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 582.147298] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 582.154549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 582.161800] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000001 00:33:30 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 582.285777] FAULT_INJECTION: forcing a failure. [ 582.285777] name failslab, interval 1, probability 0, space 0, times 0 [ 582.309166] CPU: 0 PID: 649 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 582.316298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.325656] Call Trace: [ 582.328262] dump_stack+0x1c4/0x2b4 [ 582.331913] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.337135] should_fail.cold.4+0xa/0x17 [ 582.341222] ? kernel_text_address+0x79/0xf0 [ 582.345647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.350774] ? unwind_get_return_address+0x61/0xa0 [ 582.355723] ? __save_stack_trace+0x8d/0xf0 [ 582.360067] ? graph_lock+0x170/0x170 [ 582.363886] ? graph_lock+0x170/0x170 [ 582.367705] ? save_stack+0xa9/0xd0 [ 582.371347] ? find_held_lock+0x36/0x1c0 [ 582.375415] ? __lock_is_held+0xb5/0x140 [ 582.379501] ? ___might_sleep+0x1ed/0x300 [ 582.383655] ? arch_local_save_flags+0x40/0x40 [ 582.388255] __should_failslab+0x124/0x180 [ 582.392507] should_failslab+0x9/0x14 [ 582.396316] kmem_cache_alloc_node_trace+0x270/0x740 [ 582.401669] ? kasan_unpoison_shadow+0x35/0x50 [ 582.406274] __kmalloc_node+0x33/0x70 [ 582.410083] blk_mq_alloc_tag_set+0x41c/0xad0 [ 582.414581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.420125] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 582.425332] loop_add+0x2c9/0xa30 [ 582.428793] ? loop_queue_rq+0x690/0x690 [ 582.432871] loop_control_ioctl+0x199/0x530 [ 582.437198] ? loop_add+0xa30/0xa30 [ 582.440830] ? arch_local_save_flags+0x40/0x40 [ 582.445425] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 582.450362] ? loop_add+0xa30/0xa30 [ 582.453993] do_vfs_ioctl+0x1de/0x1720 [ 582.457892] ? ioctl_preallocate+0x300/0x300 [ 582.462312] ? selinux_file_mprotect+0x620/0x620 [ 582.467074] ? __sb_end_write+0xd9/0x110 [ 582.471143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 582.476684] ? fput+0x130/0x1a0 [ 582.479967] ? do_syscall_64+0x9a/0x820 [ 582.483949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.489499] ? security_file_ioctl+0x94/0xc0 [ 582.493920] ksys_ioctl+0xa9/0xd0 [ 582.497383] __x64_sys_ioctl+0x73/0xb0 [ 582.501275] do_syscall_64+0x1b9/0x820 [ 582.505168] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 582.510554] ? syscall_return_slowpath+0x5e0/0x5e0 [ 582.515499] ? trace_hardirqs_on_caller+0x310/0x310 [ 582.520524] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 582.525545] ? recalc_sigpending_tsk+0x180/0x180 [ 582.530304] ? kasan_check_write+0x14/0x20 [ 582.534549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.539402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.544596] RIP: 0033:0x457679 [ 582.547795] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.566694] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.574407] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 00:33:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1f9, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 582.581676] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 582.588946] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 582.596216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 582.603492] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000002 00:33:31 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x8b00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:31 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x29, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x101, 0x1) 00:33:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x70, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 582.879976] FAULT_INJECTION: forcing a failure. [ 582.879976] name failslab, interval 1, probability 0, space 0, times 0 [ 582.899203] CPU: 0 PID: 674 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 582.906513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.915873] Call Trace: [ 582.918495] dump_stack+0x1c4/0x2b4 [ 582.922146] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.927353] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 582.932820] ? compat_start_thread+0x80/0x80 [ 582.937251] should_fail.cold.4+0xa/0x17 [ 582.941332] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.946470] ? __switch_to_asm+0x34/0x70 [ 582.950561] ? preempt_notifier_register+0x200/0x200 [ 582.950576] ? __switch_to_asm+0x34/0x70 [ 582.950595] ? graph_lock+0x170/0x170 [ 582.950608] ? __switch_to_asm+0x40/0x70 [ 582.950622] ? __switch_to_asm+0x34/0x70 [ 582.950635] ? __switch_to_asm+0x40/0x70 [ 582.950648] ? __switch_to_asm+0x34/0x70 [ 582.950664] ? graph_lock+0x170/0x170 [ 582.950683] ? __switch_to_asm+0x40/0x70 [ 582.987697] ? __switch_to_asm+0x34/0x70 [ 582.991767] ? __switch_to_asm+0x40/0x70 [ 582.995842] ? find_held_lock+0x36/0x1c0 [ 582.999913] ? __lock_is_held+0xb5/0x140 [ 583.003993] ? ___might_sleep+0x1ed/0x300 [ 583.008148] ? arch_local_save_flags+0x40/0x40 [ 583.012736] ? trace_hardirqs_on_caller+0xc0/0x310 [ 583.017677] ? trace_hardirqs_off+0x310/0x310 [ 583.022180] __should_failslab+0x124/0x180 [ 583.026424] should_failslab+0x9/0x14 [ 583.030227] kmem_cache_alloc_node_trace+0x270/0x740 [ 583.035336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.040874] ? find_next_bit+0x104/0x130 [ 583.044949] blk_mq_init_tags+0x79/0x2b0 [ 583.049022] blk_mq_alloc_rq_map+0x9f/0x220 [ 583.053356] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 583.057862] blk_mq_alloc_tag_set+0x627/0xad0 [ 583.062369] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 583.067574] loop_add+0x2c9/0xa30 [ 583.071034] ? loop_queue_rq+0x690/0x690 [ 583.075108] loop_control_ioctl+0x199/0x530 [ 583.079436] ? loop_add+0xa30/0xa30 [ 583.083067] ? arch_local_save_flags+0x40/0x40 [ 583.087659] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 583.092601] ? loop_add+0xa30/0xa30 [ 583.096232] do_vfs_ioctl+0x1de/0x1720 [ 583.100131] ? ioctl_preallocate+0x300/0x300 [ 583.104549] ? selinux_file_mprotect+0x620/0x620 [ 583.109312] ? __sb_end_write+0xd9/0x110 [ 583.113382] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 583.118921] ? fput+0x130/0x1a0 [ 583.122203] ? do_syscall_64+0x9a/0x820 [ 583.126184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 583.131723] ? security_file_ioctl+0x94/0xc0 [ 583.136144] ksys_ioctl+0xa9/0xd0 [ 583.139607] __x64_sys_ioctl+0x73/0xb0 [ 583.143509] do_syscall_64+0x1b9/0x820 [ 583.147402] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 583.152774] ? syscall_return_slowpath+0x5e0/0x5e0 [ 583.157710] ? trace_hardirqs_on_caller+0x310/0x310 [ 583.162753] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 583.167776] ? recalc_sigpending_tsk+0x180/0x180 [ 583.172547] ? kasan_check_write+0x14/0x20 [ 583.176807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.181662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 583.186850] RIP: 0033:0x457679 [ 583.190049] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.208948] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.216665] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 583.223941] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 583.231208] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 583.238479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 583.245760] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000003 00:33:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xa, &(0x7f0000000000)=0x101, 0x1) [ 583.275853] blk-mq: reduced tag depth (128 -> 64) 00:33:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2ab, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xa, &(0x7f0000000000)=0x101, 0x1) 00:33:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x31, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:31 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x1) [ 583.533102] FAULT_INJECTION: forcing a failure. [ 583.533102] name failslab, interval 1, probability 0, space 0, times 0 [ 583.555727] CPU: 1 PID: 701 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 583.562879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.572240] Call Trace: [ 583.574851] dump_stack+0x1c4/0x2b4 [ 583.578505] ? dump_stack_print_info.cold.2+0x52/0x52 [ 583.583724] should_fail.cold.4+0xa/0x17 [ 583.587797] ? check_preemption_disabled+0x48/0x200 [ 583.592829] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 583.597944] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 583.603749] ? kasan_check_read+0x11/0x20 [ 583.607908] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 583.613214] ? graph_lock+0x170/0x170 [ 583.617028] ? rcu_bh_qs+0xc0/0xc0 [ 583.620571] ? unwind_dump+0x190/0x190 [ 583.624469] ? graph_lock+0x170/0x170 [ 583.628287] ? is_bpf_text_address+0xd3/0x170 [ 583.632796] ? find_held_lock+0x36/0x1c0 [ 583.636864] ? __lock_is_held+0xb5/0x140 [ 583.640946] ? ___might_sleep+0x1ed/0x300 [ 583.645096] ? save_stack+0xa9/0xd0 [ 583.648731] ? arch_local_save_flags+0x40/0x40 [ 583.653312] ? save_stack+0x43/0xd0 [ 583.656941] ? kasan_kmalloc+0xc7/0xe0 [ 583.660834] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 583.666117] ? blk_mq_init_tags+0x79/0x2b0 [ 583.670357] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 583.675031] ? loop_add+0x2c9/0xa30 [ 583.678672] __should_failslab+0x124/0x180 [ 583.682915] should_failslab+0x9/0x14 [ 583.686721] kmem_cache_alloc_node_trace+0x270/0x740 [ 583.691841] __kmalloc_node+0x33/0x70 [ 583.695651] sbitmap_init_node+0x288/0x440 [ 583.699900] sbitmap_queue_init_node+0xb2/0x850 [ 583.704576] ? __lock_is_held+0xb5/0x140 [ 583.708647] ? sbitmap_init_node+0x440/0x440 [ 583.713057] ? blk_mq_init_tags+0x79/0x2b0 [ 583.717313] ? rcu_read_lock_sched_held+0x108/0x120 [ 583.722339] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 583.727621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.733165] ? find_next_bit+0x104/0x130 [ 583.737237] blk_mq_init_tags+0x116/0x2b0 [ 583.741403] blk_mq_alloc_rq_map+0x9f/0x220 [ 583.745735] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 583.750252] blk_mq_alloc_tag_set+0x627/0xad0 [ 583.754760] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 583.759975] loop_add+0x2c9/0xa30 [ 583.763441] ? loop_queue_rq+0x690/0x690 [ 583.767527] loop_control_ioctl+0x199/0x530 [ 583.771855] ? loop_add+0xa30/0xa30 [ 583.775494] ? arch_local_save_flags+0x40/0x40 [ 583.780088] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 583.785029] ? loop_add+0xa30/0xa30 [ 583.788663] do_vfs_ioctl+0x1de/0x1720 [ 583.792568] ? ioctl_preallocate+0x300/0x300 [ 583.796992] ? selinux_file_mprotect+0x620/0x620 [ 583.801764] ? __sb_end_write+0xd9/0x110 [ 583.805841] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 583.811385] ? fput+0x130/0x1a0 [ 583.814675] ? do_syscall_64+0x9a/0x820 [ 583.818660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 583.824207] ? security_file_ioctl+0x94/0xc0 [ 583.828626] ksys_ioctl+0xa9/0xd0 [ 583.832089] __x64_sys_ioctl+0x73/0xb0 [ 583.835981] do_syscall_64+0x1b9/0x820 [ 583.839872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 583.845251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 583.850196] ? trace_hardirqs_on_caller+0x310/0x310 [ 583.855218] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 583.860255] ? recalc_sigpending_tsk+0x180/0x180 [ 583.865026] ? kasan_check_write+0x14/0x20 [ 583.869280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.874142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 583.879332] RIP: 0033:0x457679 [ 583.882537] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.901449] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.909188] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 583.916473] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 583.923763] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 583.931044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 583.938320] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000004 [ 583.960159] blk-mq: reduced tag depth (128 -> 64) 00:33:32 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ea, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xd, &(0x7f0000000000)=0x101, 0x1) 00:33:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x30, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:32 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xc, &(0x7f0000000000)=0x101, 0x1) 00:33:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0xd, &(0x7f0000000000)=0x101, 0x1) 00:33:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x102, 0x1) 00:33:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1d6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 584.394171] FAULT_INJECTION: forcing a failure. [ 584.394171] name failslab, interval 1, probability 0, space 0, times 0 [ 584.416194] CPU: 1 PID: 729 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 584.423332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.432693] Call Trace: [ 584.435298] dump_stack+0x1c4/0x2b4 [ 584.438951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.444160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.449716] ? check_preemption_disabled+0x48/0x200 [ 584.454755] should_fail.cold.4+0xa/0x17 [ 584.458837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.463964] ? graph_lock+0x170/0x170 [ 584.467780] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 584.473327] ? graph_lock+0x170/0x170 [ 584.477155] ? find_held_lock+0x36/0x1c0 [ 584.481231] ? __lock_is_held+0xb5/0x140 [ 584.485330] ? ___might_sleep+0x1ed/0x300 [ 584.489502] ? arch_local_save_flags+0x40/0x40 [ 584.494101] ? __kmalloc_node+0x33/0x70 [ 584.498091] ? __kmalloc_node+0x33/0x70 [ 584.502091] __should_failslab+0x124/0x180 [ 584.506344] should_failslab+0x9/0x14 [ 584.510160] kmem_cache_alloc_node_trace+0x270/0x740 [ 584.515281] ? check_preemption_disabled+0x48/0x200 [ 584.520312] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.525342] ? find_next_bit+0x104/0x130 [ 584.529427] sbitmap_queue_init_node+0x332/0x850 [ 584.534193] ? __lock_is_held+0xb5/0x140 [ 584.538280] ? sbitmap_init_node+0x440/0x440 [ 584.542701] ? blk_mq_init_tags+0x79/0x2b0 [ 584.546950] ? rcu_read_lock_sched_held+0x108/0x120 [ 584.551982] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 584.557273] ? find_next_bit+0x104/0x130 [ 584.561351] blk_mq_init_tags+0x116/0x2b0 [ 584.565524] blk_mq_alloc_rq_map+0x9f/0x220 [ 584.569859] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 584.574369] blk_mq_alloc_tag_set+0x627/0xad0 [ 584.578883] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 584.584096] loop_add+0x2c9/0xa30 [ 584.587567] ? loop_queue_rq+0x690/0x690 [ 584.591653] loop_control_ioctl+0x199/0x530 [ 584.595991] ? loop_add+0xa30/0xa30 [ 584.599632] ? arch_local_save_flags+0x40/0x40 [ 584.604233] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 584.609185] ? loop_add+0xa30/0xa30 [ 584.612880] do_vfs_ioctl+0x1de/0x1720 [ 584.616788] ? ioctl_preallocate+0x300/0x300 [ 584.621217] ? selinux_file_mprotect+0x620/0x620 [ 584.625996] ? __sb_end_write+0xd9/0x110 [ 584.630069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 584.635616] ? fput+0x130/0x1a0 [ 584.638906] ? do_syscall_64+0x9a/0x820 [ 584.642897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.648445] ? security_file_ioctl+0x94/0xc0 [ 584.652873] ksys_ioctl+0xa9/0xd0 [ 584.656343] __x64_sys_ioctl+0x73/0xb0 [ 584.660250] do_syscall_64+0x1b9/0x820 [ 584.664150] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 584.669527] ? syscall_return_slowpath+0x5e0/0x5e0 [ 584.674471] ? trace_hardirqs_on_caller+0x310/0x310 [ 584.679518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 584.684546] ? recalc_sigpending_tsk+0x180/0x180 [ 584.689309] ? kasan_check_write+0x14/0x20 [ 584.693559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 584.698418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.703613] RIP: 0033:0x457679 [ 584.706817] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.725727] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.733450] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 00:33:33 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x12a, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 584.740736] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 584.748011] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 584.755284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 584.762568] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000005 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 584.806128] blk-mq: reduced tag depth (128 -> 64) 00:33:33 executing program 5 (fault-call:4 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x2) 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x7, &(0x7f0000000000)=0x101, 0x1) 00:33:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x23f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 585.045034] FAULT_INJECTION: forcing a failure. [ 585.045034] name failslab, interval 1, probability 0, space 0, times 0 [ 585.062156] CPU: 1 PID: 758 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 585.069280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.078639] Call Trace: [ 585.081239] dump_stack+0x1c4/0x2b4 [ 585.084897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 585.090108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.095656] ? check_preemption_disabled+0x48/0x200 [ 585.100697] should_fail.cold.4+0xa/0x17 [ 585.104775] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 585.109895] ? graph_lock+0x170/0x170 [ 585.113710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.119270] ? graph_lock+0x170/0x170 [ 585.123096] ? find_held_lock+0x36/0x1c0 [ 585.127174] ? __lock_is_held+0xb5/0x140 [ 585.131266] ? ___might_sleep+0x1ed/0x300 [ 585.135426] ? arch_local_save_flags+0x40/0x40 [ 585.140022] ? __lockdep_init_map+0x105/0x590 [ 585.144542] __should_failslab+0x124/0x180 [ 585.148794] should_failslab+0x9/0x14 [ 585.152611] kmem_cache_alloc_node_trace+0x270/0x740 [ 585.157725] ? init_wait_entry+0x1c0/0x1c0 [ 585.161967] ? check_preemption_disabled+0x48/0x200 [ 585.166997] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 585.172037] sbitmap_queue_init_node+0x332/0x850 [ 585.176809] ? __lock_is_held+0xb5/0x140 [ 585.180896] ? sbitmap_init_node+0x440/0x440 [ 585.185318] ? blk_mq_init_tags+0x79/0x2b0 [ 585.189570] ? rcu_read_lock_sched_held+0x108/0x120 [ 585.194603] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 585.199896] ? find_next_bit+0x104/0x130 [ 585.203982] blk_mq_init_tags+0x177/0x2b0 [ 585.208152] blk_mq_alloc_rq_map+0x9f/0x220 [ 585.212503] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 585.217020] blk_mq_alloc_tag_set+0x627/0xad0 [ 585.221539] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 585.226755] loop_add+0x2c9/0xa30 [ 585.230229] ? loop_queue_rq+0x690/0x690 [ 585.234321] loop_control_ioctl+0x199/0x530 [ 585.238657] ? loop_add+0xa30/0xa30 [ 585.242310] ? arch_local_save_flags+0x40/0x40 [ 585.246920] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 585.251872] ? loop_add+0xa30/0xa30 [ 585.255519] do_vfs_ioctl+0x1de/0x1720 [ 585.259431] ? ioctl_preallocate+0x300/0x300 [ 585.263858] ? selinux_file_mprotect+0x620/0x620 [ 585.268629] ? __sb_end_write+0xd9/0x110 [ 585.272714] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.278269] ? fput+0x130/0x1a0 [ 585.281565] ? do_syscall_64+0x9a/0x820 [ 585.285558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.291108] ? security_file_ioctl+0x94/0xc0 [ 585.295538] ksys_ioctl+0xa9/0xd0 [ 585.299010] __x64_sys_ioctl+0x73/0xb0 [ 585.302918] do_syscall_64+0x1b9/0x820 [ 585.306819] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 585.312200] ? syscall_return_slowpath+0x5e0/0x5e0 [ 585.317151] ? trace_hardirqs_on_caller+0x310/0x310 [ 585.322181] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 585.327211] ? recalc_sigpending_tsk+0x180/0x180 [ 585.331983] ? kasan_check_write+0x14/0x20 [ 585.336236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.341115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.346316] RIP: 0033:0x457679 [ 585.349528] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.368618] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.376346] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 585.383625] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 00:33:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x20000001) 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x101, 0x1) 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x1, 0xfffffffffffffdf8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x171f01, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="154a0a5c1ec84975", 0x8) 00:33:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x1) [ 585.390903] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 585.398184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 585.405462] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000006 [ 585.453556] blk-mq: reduced tag depth (128 -> 64) 00:33:34 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x6, 0x734, 0x4]}) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x15000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000080)=0x101, 0x390) 00:33:34 executing program 5 (fault-call:4 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2c1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x9, &(0x7f0000000080)=0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x24) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e) 00:33:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x292, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x800) [ 585.863291] FAULT_INJECTION: forcing a failure. [ 585.863291] name failslab, interval 1, probability 0, space 0, times 0 [ 585.877724] CPU: 0 PID: 803 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 585.884859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.894216] Call Trace: [ 585.896832] dump_stack+0x1c4/0x2b4 [ 585.900490] ? dump_stack_print_info.cold.2+0x52/0x52 [ 585.905697] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 00:33:34 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x210000, 0x0) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x72, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) open_by_handle_at(r1, &(0x7f0000000140)={0x51, 0x6, "315149813712207d416580ad5f9d5a7794181ffeb72b2bd174329fc849b84759a772224cfe0591d7748a12d444359a5ed5388b429b2099f9411bd1319094e36cf6da88c471ed878873"}, 0x420902) setsockopt$bt_BT_POWER(r1, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r0, 0xf, 0x2}, 0x10) [ 585.910377] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 585.915061] ? loop_add+0x2c9/0xa30 [ 585.918704] ? loop_control_ioctl+0x199/0x530 [ 585.923218] ? ksys_ioctl+0xa9/0xd0 [ 585.926861] should_fail.cold.4+0xa/0x17 [ 585.930945] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 585.936065] ? graph_lock+0x170/0x170 [ 585.939879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.945426] ? check_preemption_disabled+0x48/0x200 [ 585.950451] ? check_preemption_disabled+0x48/0x200 [ 585.955502] ? graph_lock+0x170/0x170 [ 585.959324] ? __lock_is_held+0xb5/0x140 00:33:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f00000000c0)="990591e9effc4f642cbf718a070c29a1f6c754f6e639c375c80705e21dcdaf1606cff7777962d552a1a5f42d354ee753bf9c3cc8cf0cce695449cec7bfd2410b14d4", 0x42, r2) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 585.963397] ? __lockdep_init_map+0x105/0x590 [ 585.967913] ? __lock_is_held+0xb5/0x140 [ 585.971997] ? ___might_sleep+0x1ed/0x300 [ 585.976168] ? arch_local_save_flags+0x40/0x40 [ 585.980775] ? sbitmap_queue_init_node+0xce/0x850 [ 585.985631] ? __lock_is_held+0xb5/0x140 [ 585.989710] __should_failslab+0x124/0x180 [ 585.993971] should_failslab+0x9/0x14 [ 585.997784] kmem_cache_alloc_node_trace+0x270/0x740 [ 586.002900] ? find_next_bit+0x104/0x130 [ 586.006986] __kmalloc_node+0x33/0x70 00:33:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040)=0x101, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 586.010800] blk_mq_alloc_rq_map+0xcc/0x220 [ 586.015139] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 586.019667] blk_mq_alloc_tag_set+0x627/0xad0 [ 586.024200] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 586.029418] loop_add+0x2c9/0xa30 [ 586.032886] ? loop_queue_rq+0x690/0x690 [ 586.036971] loop_control_ioctl+0x199/0x530 [ 586.041311] ? loop_add+0xa30/0xa30 [ 586.044959] ? arch_local_save_flags+0x40/0x40 [ 586.049560] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 586.054512] ? loop_add+0xa30/0xa30 [ 586.058156] do_vfs_ioctl+0x1de/0x1720 [ 586.062067] ? ioctl_preallocate+0x300/0x300 [ 586.066492] ? selinux_file_mprotect+0x620/0x620 [ 586.071241] ? __sb_end_write+0xd9/0x110 [ 586.075310] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 586.080830] ? fput+0x130/0x1a0 [ 586.084095] ? do_syscall_64+0x9a/0x820 [ 586.088054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.093580] ? security_file_ioctl+0x94/0xc0 [ 586.097977] ksys_ioctl+0xa9/0xd0 [ 586.101419] __x64_sys_ioctl+0x73/0xb0 [ 586.105293] do_syscall_64+0x1b9/0x820 [ 586.109165] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 586.114515] ? syscall_return_slowpath+0x5e0/0x5e0 [ 586.119433] ? trace_hardirqs_on_caller+0x310/0x310 [ 586.124433] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 586.129441] ? recalc_sigpending_tsk+0x180/0x180 [ 586.134181] ? kasan_check_write+0x14/0x20 [ 586.138403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 586.143235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.148409] RIP: 0033:0x457679 [ 586.151588] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.170474] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.178174] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 586.185426] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 586.192678] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 586.199933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 586.207183] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000007 [ 586.216357] blk-mq: reduced tag depth (128 -> 64) 00:33:34 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:34 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1f0000000c38ea92ffbf95e674010418dfbf24064a1aa78e92956de40957026fefbedbf1a21aec1a5844305a6b6d9b1e333df5951aee315cb340d1d3a833cf75e766c530f106f937b4d52769b1d5bb2573a82a20f98d5289a7d9f578871a8537c241c0b1d9f08f7ad11c4fed79eb775f7bbfb0b3b69fbb0cb951626140228cb2c855a07286671f25b7a9a07376f2ce7ec3be49a5ad8aef"], &(0x7f0000000100)=0x27) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0xffffffff}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x400003, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000040)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x142}, 0x8) setsockopt$bt_BT_POWER(r2, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x96010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:34 executing program 5 (fault-call:4 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x39, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffb, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x36c70436, &(0x7f0000000140)=0xbd) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00', 0x1f}) 00:33:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1a0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:35 executing program 3: socketpair$inet6(0xa, 0x801, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 586.727013] FAULT_INJECTION: forcing a failure. [ 586.727013] name failslab, interval 1, probability 0, space 0, times 0 [ 586.738852] CPU: 0 PID: 856 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 586.745967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.745975] Call Trace: [ 586.745999] dump_stack+0x1c4/0x2b4 [ 586.746024] ? dump_stack_print_info.cold.2+0x52/0x52 [ 586.757974] should_fail.cold.4+0xa/0x17 [ 586.757992] ? kernel_text_address+0x79/0xf0 [ 586.758013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 586.766812] ? unwind_get_return_address+0x61/0xa0 [ 586.766834] ? __save_stack_trace+0x8d/0xf0 [ 586.766861] ? graph_lock+0x170/0x170 [ 586.766879] ? save_stack+0xa9/0xd0 [ 586.775336] ? save_stack+0x43/0xd0 [ 586.775349] ? kasan_kmalloc+0xc7/0xe0 [ 586.775365] ? __kmalloc_node+0x47/0x70 [ 586.775387] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 586.789719] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 586.789734] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 586.789764] ? loop_add+0x2c9/0xa30 [ 586.797171] ? __lock_is_held+0xb5/0x140 [ 586.797186] ? graph_lock+0x170/0x170 [ 586.797216] ? ___might_sleep+0x1ed/0x300 [ 586.804721] ? arch_local_save_flags+0x40/0x40 [ 586.804740] ? __lock_is_held+0xb5/0x140 [ 586.804772] __should_failslab+0x124/0x180 [ 586.804794] should_failslab+0x9/0x14 [ 586.813266] kmem_cache_alloc_node_trace+0x270/0x740 [ 586.813283] ? kasan_unpoison_shadow+0x35/0x50 [ 586.813309] __kmalloc_node+0x33/0x70 [ 586.813328] blk_mq_alloc_rq_map+0x10d/0x220 [ 586.813348] __blk_mq_alloc_rq_map+0xb1/0x2e0 00:33:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getgroups(0x6, &(0x7f0000000000)=[0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) r3 = getgid() getgroups(0x5, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee01]) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) sendto$inet(r2, &(0x7f0000000180)="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", 0xfc, 0x4, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) setresgid(r1, r3, r4) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0xff, 0xc11e4920) socket$inet_udplite(0x2, 0x2, 0x88) [ 586.822667] blk_mq_alloc_tag_set+0x627/0xad0 [ 586.822693] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 586.822722] loop_add+0x2c9/0xa30 [ 586.830391] ? loop_queue_rq+0x690/0x690 [ 586.830422] loop_control_ioctl+0x199/0x530 [ 586.830440] ? loop_add+0xa30/0xa30 [ 586.830458] ? arch_local_save_flags+0x40/0x40 [ 586.830493] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 586.838428] ? loop_add+0xa30/0xa30 [ 586.838449] do_vfs_ioctl+0x1de/0x1720 [ 586.838472] ? ioctl_preallocate+0x300/0x300 00:33:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x0) [ 586.838504] ? selinux_file_mprotect+0x620/0x620 [ 586.847124] ? __sb_end_write+0xd9/0x110 [ 586.847148] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 586.847164] ? fput+0x130/0x1a0 [ 586.855183] ? do_syscall_64+0x9a/0x820 [ 586.855206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.855224] ? security_file_ioctl+0x94/0xc0 [ 586.855244] ksys_ioctl+0xa9/0xd0 [ 586.958987] __x64_sys_ioctl+0x73/0xb0 [ 586.962893] do_syscall_64+0x1b9/0x820 [ 586.966793] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 586.972168] ? syscall_return_slowpath+0x5e0/0x5e0 [ 586.977111] ? trace_hardirqs_on_caller+0x310/0x310 [ 586.982405] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 586.987434] ? recalc_sigpending_tsk+0x180/0x180 [ 586.992204] ? kasan_check_write+0x14/0x20 [ 586.996459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 587.001337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.006535] RIP: 0033:0x457679 [ 587.009755] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:33:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 587.028665] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.036384] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 587.043654] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 587.050925] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 587.058205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 587.065497] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000008 [ 587.094804] blk-mq: reduced tag depth (128 -> 64) 00:33:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2d6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:35 executing program 5 (fault-call:4 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc5010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x400100000005, 0x1) 00:33:35 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:35 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10480, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000100)=0x1ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x8, 0x104) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r2 = fcntl$dupfd(r1, 0x200000000, r0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000000c0)=0xff9) 00:33:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x40, 0x135) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) getsockname(r0, &(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, &(0x7f0000000100)=0x80) 00:33:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1be, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 587.565703] FAULT_INJECTION: forcing a failure. [ 587.565703] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 587.596997] CPU: 1 PID: 903 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 587.604135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.613504] Call Trace: [ 587.616115] dump_stack+0x1c4/0x2b4 [ 587.619764] ? dump_stack_print_info.cold.2+0x52/0x52 [ 587.624971] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 587.630783] should_fail.cold.4+0xa/0x17 [ 587.634857] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 587.639976] ? graph_lock+0x170/0x170 [ 587.643784] ? find_held_lock+0x36/0x1c0 [ 587.647861] ? is_bpf_text_address+0xac/0x170 [ 587.652362] ? __lock_is_held+0xb5/0x140 [ 587.656439] ? rcu_bh_qs+0xc0/0xc0 [ 587.659989] ? ___might_sleep+0x1ed/0x300 [ 587.664144] ? arch_local_save_flags+0x40/0x40 [ 587.668733] ? is_bpf_text_address+0xd3/0x170 [ 587.673241] ? __might_sleep+0x95/0x190 [ 587.677233] __alloc_pages_nodemask+0x34b/0xde0 [ 587.681920] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 587.686947] ? save_stack+0xa9/0xd0 [ 587.690583] ? save_stack+0x43/0xd0 [ 587.694211] ? kasan_kmalloc+0xc7/0xe0 [ 587.698103] ? __kmalloc_node+0x47/0x70 [ 587.702078] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 587.706662] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 587.711338] ? __x64_sys_ioctl+0x73/0xb0 [ 587.715405] ? do_syscall_64+0x1b9/0x820 [ 587.719470] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.724849] ? graph_lock+0x170/0x170 [ 587.728655] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.734197] ? find_next_bit+0x104/0x130 [ 587.738274] ? __cpu_to_node+0x7d/0xa0 [ 587.742171] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 587.747020] blk_mq_alloc_rqs+0x31c/0x980 [ 587.751281] ? blk_mq_alloc_rq_map+0x220/0x220 [ 587.755869] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 587.761150] ? kasan_unpoison_shadow+0x35/0x50 [ 587.765746] ? __kmalloc_node+0x47/0x70 [ 587.769733] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 587.774326] blk_mq_alloc_tag_set+0x627/0xad0 [ 587.778835] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 587.784043] loop_add+0x2c9/0xa30 [ 587.787511] ? loop_queue_rq+0x690/0x690 [ 587.791591] loop_control_ioctl+0x199/0x530 [ 587.795921] ? loop_add+0xa30/0xa30 [ 587.799552] ? arch_local_save_flags+0x40/0x40 [ 587.804148] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 587.809090] ? loop_add+0xa30/0xa30 [ 587.812723] do_vfs_ioctl+0x1de/0x1720 [ 587.816624] ? ioctl_preallocate+0x300/0x300 [ 587.821040] ? selinux_file_mprotect+0x620/0x620 [ 587.825822] ? __sb_end_write+0xd9/0x110 [ 587.829891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 587.835431] ? fput+0x130/0x1a0 [ 587.838718] ? do_syscall_64+0x9a/0x820 [ 587.842702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.848268] ? security_file_ioctl+0x94/0xc0 [ 587.852690] ksys_ioctl+0xa9/0xd0 [ 587.856151] __x64_sys_ioctl+0x73/0xb0 [ 587.860044] do_syscall_64+0x1b9/0x820 [ 587.863933] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 587.869300] ? syscall_return_slowpath+0x5e0/0x5e0 [ 587.874236] ? trace_hardirqs_on_caller+0x310/0x310 [ 587.879269] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 587.884290] ? recalc_sigpending_tsk+0x180/0x180 [ 587.889048] ? kasan_check_write+0x14/0x20 [ 587.893291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 587.898144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.903333] RIP: 0033:0x457679 [ 587.906528] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.925428] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.933145] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 587.940412] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 587.947682] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 587.954955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 587.962224] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000009 00:33:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x801, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000402) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x6, 0x401}, {0x1000, 0x5}, 0x100000000, 0x1, 0x1}) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x85, "c5414e028c2883c635254ccf8806817dcf545d1d6d8b431d568162794b3e1d1714add055b9503d7474568c38369ab0fbdb5306a5587b7e2b13bddb6762ccb8bba2d9bede1f3f9de00c33ef8d68ae6870253c762bae7ecf9f8d0fd5050d78ac716b13f8cd2773261b1af8001dfd427055ca53fcfe84cfcbded4f6961a87ea28c813d82ffec2"}, &(0x7f0000000200)=0x8d) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x4, 0x48, "d5da85f6cbdd1a535e1ed0b0321c271ae0d811e11ac4e734c7fe5d54be9404f7e8919811cf0a571a8e16f9976b4026a85edca2783281a984a02395a63c7d5f017bde5321fdd033f9"}, 0x50) 00:33:36 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x10000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:36 executing program 5 (fault-call:4 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x19c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000200)={0x1, 0x3}, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000080)={0x3, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @local}}}, 0x108) 00:33:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x80080) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x800) signalfd(r0, &(0x7f0000000080)={0x100000000}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000001c0)=""/253) 00:33:36 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x3, 0x3}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) fcntl$notify(r1, 0x402, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) 00:33:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x284, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 588.327022] FAULT_INJECTION: forcing a failure. [ 588.327022] name failslab, interval 1, probability 0, space 0, times 0 [ 588.350119] CPU: 1 PID: 938 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 588.357250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.366616] Call Trace: [ 588.369216] dump_stack+0x1c4/0x2b4 [ 588.372863] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.378076] ? is_bpf_text_address+0xac/0x170 [ 588.382593] should_fail.cold.4+0xa/0x17 [ 588.386678] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.391809] ? graph_lock+0x170/0x170 [ 588.395628] ? __lock_is_held+0xb5/0x140 [ 588.399704] ? graph_lock+0x170/0x170 [ 588.403981] ? find_held_lock+0x36/0x1c0 [ 588.408058] ? __lock_is_held+0xb5/0x140 [ 588.412147] ? ___might_sleep+0x1ed/0x300 [ 588.416312] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 588.420906] ? arch_local_save_flags+0x40/0x40 [ 588.425511] ? __x64_sys_ioctl+0x73/0xb0 [ 588.429598] __should_failslab+0x124/0x180 [ 588.433850] should_failslab+0x9/0x14 [ 588.437669] kmem_cache_alloc_node+0x26e/0x730 [ 588.442279] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 588.447318] blk_alloc_queue_node+0xed/0xe90 [ 588.451746] ? blk_init_allocated_queue+0x640/0x640 [ 588.456775] ? __mutex_init+0x1f7/0x290 [ 588.460767] ? __ia32_sys_membarrier+0x150/0x150 [ 588.465557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.471108] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 588.475881] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 588.480591] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 588.485800] blk_mq_init_queue+0x4b/0xb0 [ 588.489883] loop_add+0x34c/0xa30 [ 588.493356] ? loop_queue_rq+0x690/0x690 [ 588.497443] loop_control_ioctl+0x199/0x530 [ 588.501785] ? loop_add+0xa30/0xa30 [ 588.505431] ? arch_local_save_flags+0x40/0x40 [ 588.510032] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 588.514984] ? loop_add+0xa30/0xa30 [ 588.518630] do_vfs_ioctl+0x1de/0x1720 [ 588.522539] ? ioctl_preallocate+0x300/0x300 [ 588.526968] ? selinux_file_mprotect+0x620/0x620 [ 588.531744] ? __sb_end_write+0xd9/0x110 [ 588.535825] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 588.541372] ? fput+0x130/0x1a0 [ 588.544665] ? do_syscall_64+0x9a/0x820 [ 588.548658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.554209] ? security_file_ioctl+0x94/0xc0 [ 588.558646] ksys_ioctl+0xa9/0xd0 [ 588.562124] __x64_sys_ioctl+0x73/0xb0 [ 588.566028] do_syscall_64+0x1b9/0x820 [ 588.569929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 588.575310] ? syscall_return_slowpath+0x5e0/0x5e0 [ 588.580261] ? trace_hardirqs_on_caller+0x310/0x310 [ 588.585302] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 588.590332] ? recalc_sigpending_tsk+0x180/0x180 [ 588.595101] ? kasan_check_write+0x14/0x20 [ 588.599355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.604222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.609424] RIP: 0033:0x457679 [ 588.612632] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.631539] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.639268] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 588.646578] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 588.653854] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 588.661130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 588.668404] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000a 00:33:37 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2e01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 00:33:37 executing program 5 (fault-call:4 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 589.241517] FAULT_INJECTION: forcing a failure. [ 589.241517] name failslab, interval 1, probability 0, space 0, times 0 [ 589.281312] CPU: 1 PID: 964 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 589.288465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.297830] Call Trace: [ 589.300438] dump_stack+0x1c4/0x2b4 [ 589.304087] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.309310] should_fail.cold.4+0xa/0x17 [ 589.313392] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.318525] ? graph_lock+0x170/0x170 [ 589.322341] ? __mutex_lock+0x85e/0x1700 [ 589.326415] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 589.331534] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 589.336652] ? graph_lock+0x170/0x170 [ 589.340475] ? kasan_check_read+0x11/0x20 [ 589.344656] ? find_held_lock+0x36/0x1c0 [ 589.348733] ? __lock_is_held+0xb5/0x140 [ 589.352820] ? ___might_sleep+0x1ed/0x300 [ 589.356987] ? arch_local_save_flags+0x40/0x40 [ 589.361595] __should_failslab+0x124/0x180 [ 589.365848] should_failslab+0x9/0x14 [ 589.369667] kmem_cache_alloc_node_trace+0x270/0x740 [ 589.374785] ? lockdep_init_map+0x9/0x10 [ 589.378861] ? __init_waitqueue_head+0x9e/0x150 [ 589.383539] ? init_wait_entry+0x1c0/0x1c0 [ 589.387796] __kmalloc_node+0x33/0x70 [ 589.391611] ? mempool_alloc_slab+0x60/0x60 [ 589.395944] mempool_init_node+0x131/0x550 [ 589.400200] ? mempool_free+0x370/0x370 [ 589.404187] ? mempool_alloc_slab+0x60/0x60 [ 589.408531] mempool_init+0x3d/0x50 [ 589.412176] bioset_init+0x3d4/0x840 [ 589.415908] ? bioset_exit+0x370/0x370 [ 589.419812] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.424857] blk_alloc_queue_node+0x280/0xe90 [ 589.429369] ? blk_init_allocated_queue+0x640/0x640 [ 589.434400] ? __mutex_init+0x1f7/0x290 [ 589.438411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.443962] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 589.448737] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 589.453429] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 589.458641] blk_mq_init_queue+0x4b/0xb0 [ 589.462718] loop_add+0x34c/0xa30 [ 589.462741] ? loop_queue_rq+0x690/0x690 [ 589.462770] loop_control_ioctl+0x199/0x530 [ 589.462788] ? loop_add+0xa30/0xa30 [ 589.462810] ? arch_local_save_flags+0x40/0x40 [ 589.470328] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 589.470353] ? loop_add+0xa30/0xa30 [ 589.470373] do_vfs_ioctl+0x1de/0x1720 [ 589.470395] ? ioctl_preallocate+0x300/0x300 [ 589.470417] ? selinux_file_mprotect+0x620/0x620 [ 589.470437] ? __sb_end_write+0xd9/0x110 [ 589.470459] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 589.514147] ? fput+0x130/0x1a0 [ 589.517437] ? do_syscall_64+0x9a/0x820 [ 589.521421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.526965] ? security_file_ioctl+0x94/0xc0 [ 589.531381] ksys_ioctl+0xa9/0xd0 [ 589.534842] __x64_sys_ioctl+0x73/0xb0 [ 589.539083] do_syscall_64+0x1b9/0x820 [ 589.542974] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 589.548343] ? syscall_return_slowpath+0x5e0/0x5e0 [ 589.553283] ? trace_hardirqs_on_caller+0x310/0x310 [ 589.558305] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 589.563326] ? recalc_sigpending_tsk+0x180/0x180 [ 589.568084] ? kasan_check_write+0x14/0x20 [ 589.572328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.577183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.582371] RIP: 0033:0x457679 [ 589.585605] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 589.604517] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.612233] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 589.619515] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 589.626782] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 589.634053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:33:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x203, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x20000, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x1ffffc, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x7fffffff}) r2 = msgget(0x2, 0x100) msgctl$IPC_RMID(r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@loopback, 0x5b, r3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000300)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000003c0)={r4, &(0x7f0000000340)=""/76}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000280)=0xf1b) 00:33:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0x8100) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x800) r3 = dup(r0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040), 0x4) 00:33:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 589.641325] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000b 00:33:38 executing program 5 (fault-call:4 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2201, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 589.776455] FAULT_INJECTION: forcing a failure. [ 589.776455] name failslab, interval 1, probability 0, space 0, times 0 [ 589.797095] CPU: 1 PID: 995 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 589.804230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.813598] Call Trace: [ 589.816206] dump_stack+0x1c4/0x2b4 [ 589.819861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.825088] should_fail.cold.4+0xa/0x17 [ 589.829165] ? __kernel_text_address+0xd/0x40 [ 589.833688] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.838806] ? __save_stack_trace+0x8d/0xf0 [ 589.843147] ? graph_lock+0x170/0x170 [ 589.846971] ? graph_lock+0x170/0x170 [ 589.850786] ? save_stack+0xa9/0xd0 [ 589.854425] ? save_stack+0x43/0xd0 [ 589.858068] ? kasan_kmalloc+0xc7/0xe0 [ 589.861973] ? __kmalloc_node+0x47/0x70 [ 589.865995] ? find_held_lock+0x36/0x1c0 [ 589.870072] ? __lock_is_held+0xb5/0x140 [ 589.874161] ? ___might_sleep+0x1ed/0x300 [ 589.878323] ? arch_local_save_flags+0x40/0x40 [ 589.882913] ? __lock_is_held+0xb5/0x140 [ 589.886999] __should_failslab+0x124/0x180 [ 589.891262] should_failslab+0x9/0x14 [ 589.895072] kmem_cache_alloc+0x2be/0x730 [ 589.899229] ? kasan_kmalloc+0xc7/0xe0 [ 589.903148] ? mempool_free+0x370/0x370 [ 589.907139] mempool_alloc_slab+0x44/0x60 [ 589.911304] mempool_init_node+0x2d2/0x550 [ 589.915564] ? mempool_free+0x370/0x370 [ 589.919551] ? mempool_alloc_slab+0x60/0x60 [ 589.923885] mempool_init+0x3d/0x50 [ 589.927537] bioset_init+0x3d4/0x840 [ 589.931275] ? bioset_exit+0x370/0x370 [ 589.935179] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.940217] blk_alloc_queue_node+0x280/0xe90 [ 589.944733] ? blk_init_allocated_queue+0x640/0x640 [ 589.949765] ? __mutex_init+0x1f7/0x290 [ 589.953774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.959324] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 589.964102] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 589.968792] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 589.973999] blk_mq_init_queue+0x4b/0xb0 [ 589.978080] loop_add+0x34c/0xa30 [ 589.981552] ? loop_queue_rq+0x690/0x690 [ 589.985642] loop_control_ioctl+0x199/0x530 [ 589.989982] ? loop_add+0xa30/0xa30 [ 589.993623] ? arch_local_save_flags+0x40/0x40 [ 589.998226] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 590.003181] ? loop_add+0xa30/0xa30 [ 590.006822] do_vfs_ioctl+0x1de/0x1720 [ 590.010730] ? ioctl_preallocate+0x300/0x300 [ 590.015161] ? selinux_file_mprotect+0x620/0x620 [ 590.019934] ? __sb_end_write+0xd9/0x110 [ 590.024018] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 590.029565] ? fput+0x130/0x1a0 [ 590.032861] ? do_syscall_64+0x9a/0x820 [ 590.036859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.042412] ? security_file_ioctl+0x94/0xc0 [ 590.046841] ksys_ioctl+0xa9/0xd0 [ 590.050314] __x64_sys_ioctl+0x73/0xb0 [ 590.054222] do_syscall_64+0x1b9/0x820 [ 590.058133] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 590.063518] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.068466] ? trace_hardirqs_on_caller+0x310/0x310 [ 590.073515] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 590.078545] ? recalc_sigpending_tsk+0x180/0x180 [ 590.083314] ? kasan_check_write+0x14/0x20 [ 590.087574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.092443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.097650] RIP: 0033:0x457679 [ 590.100854] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.119762] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:33:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1bf, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 590.127497] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 590.134778] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 590.142054] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 590.149334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 590.156613] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000c 00:33:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', '\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2002, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x9e0, 0x2, 0x3, @broadcast, 'irlan0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000480)=[0xffffffffffffffff]) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, 0x0}) r9 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) r12 = getuid() r13 = getegid() sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="88151ebf8e8e4b2100ff90b8f1d7c35a5d50cd51f23af661048a41d2017c983e856955ec578322ed9c6b9449d62b3c6737bac07de8e085503af72c322dfc4f7bac7d652ff1f3f2766ff0929315679f6ebea039c16cf6c9a964f70c90f9c28fea3c367a8c0cbdfadee3777a40", 0x6c}, {&(0x7f00000001c0)="7f47a4afbc1dba765e0d388083c3ff4f8a877207e27c9f07f86a42c2abe84bdf7911314aa81a0e89234bcd92a04e9a768d8701b8892d4b40a4ab6caf247c0de7e63083a7b41d62d2730535cf4afb3f1ff59c155e6b4def4c21b83da999c48029cd125b5442204328f3951640304596cbf80d7205017118233fcc09ef32a55182f8716224c44ba5d448cea2c7f755fbbd2799baa213d115e286b85a4e2e2566fdf9c0a912eff388d35e2159fac42c3e16af2cd0739dcaa55a85138006f77d15e0d75f1876c60099031d395ba3c324748716c9eb1e1bfd", 0xd6}, {&(0x7f00000002c0)="c5421a4d0db4aae928051a0231ae80687e2a699d529f1e56737d3a1ea3f24604766cd8e2cebb0e9226583f69bdb7b932509ea610c8e89b75f8f39ab4463b1633f55d943888a72608ae68616fad6e47c265b189a144d48cb05f7580d3e6805629ad784d09f21bbf975a43b8bb33cfb943c85f7b40614b59b043e5fc0aaefc44f7", 0x80}], 0x3, &(0x7f0000000800)=[@rights={0x10}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r1, r0, r1, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x110, 0x40}, 0x20008010) 00:33:38 executing program 5 (fault-call:4 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:38 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1d8, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 590.680857] FAULT_INJECTION: forcing a failure. [ 590.680857] name failslab, interval 1, probability 0, space 0, times 0 [ 590.713359] CPU: 0 PID: 1023 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 590.720589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:33:39 executing program 3: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040)=0x101, 0x1) [ 590.729957] Call Trace: [ 590.732563] dump_stack+0x1c4/0x2b4 [ 590.736210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 590.741413] ? __kernel_text_address+0xd/0x40 [ 590.745922] ? unwind_get_return_address+0x61/0xa0 [ 590.750872] should_fail.cold.4+0xa/0x17 [ 590.754949] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 590.760102] ? save_stack+0xa9/0xd0 [ 590.763799] ? graph_lock+0x170/0x170 [ 590.767622] ? kasan_slab_alloc+0x12/0x20 [ 590.771790] ? kmem_cache_alloc+0x12e/0x730 [ 590.776129] ? mempool_alloc_slab+0x44/0x60 [ 590.780462] ? mempool_init_node+0x2d2/0x550 [ 590.784892] ? mempool_init+0x3d/0x50 [ 590.788708] ? graph_lock+0x170/0x170 [ 590.792527] ? loop_add+0x34c/0xa30 [ 590.796170] ? loop_control_ioctl+0x199/0x530 [ 590.800679] ? do_vfs_ioctl+0x1de/0x1720 [ 590.804759] ? ksys_ioctl+0xa9/0xd0 [ 590.808395] ? __x64_sys_ioctl+0x73/0xb0 [ 590.812471] ? do_syscall_64+0x1b9/0x820 [ 590.816558] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.821938] ? find_held_lock+0x36/0x1c0 [ 590.826017] ? __lock_is_held+0xb5/0x140 [ 590.830104] ? ___might_sleep+0x1ed/0x300 [ 590.834265] ? arch_local_save_flags+0x40/0x40 [ 590.834293] __should_failslab+0x124/0x180 [ 590.843098] should_failslab+0x9/0x14 [ 590.843115] kmem_cache_alloc+0x2be/0x730 [ 590.843133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.843148] ? __phys_addr+0xa6/0x120 [ 590.843165] ? mempool_init+0x3d/0x50 [ 590.843190] ? mempool_free+0x370/0x370 [ 590.868185] mempool_alloc_slab+0x44/0x60 [ 590.872344] mempool_init_node+0x2d2/0x550 [ 590.876599] ? mempool_free+0x370/0x370 [ 590.880584] ? mempool_alloc_slab+0x60/0x60 [ 590.884920] mempool_init+0x3d/0x50 [ 590.888565] bioset_init+0x3d4/0x840 [ 590.892296] ? bioset_exit+0x370/0x370 [ 590.896212] blk_alloc_queue_node+0x280/0xe90 [ 590.900718] ? blk_init_allocated_queue+0x640/0x640 [ 590.905749] ? __mutex_init+0x1f7/0x290 [ 590.909759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.915304] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 590.920070] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 590.924754] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 590.929959] blk_mq_init_queue+0x4b/0xb0 [ 590.934031] loop_add+0x34c/0xa30 [ 590.937504] ? loop_queue_rq+0x690/0x690 [ 590.941584] loop_control_ioctl+0x199/0x530 [ 590.945914] ? loop_add+0xa30/0xa30 [ 590.949569] ? arch_local_save_flags+0x40/0x40 [ 590.954166] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 590.959109] ? loop_add+0xa30/0xa30 [ 590.962750] do_vfs_ioctl+0x1de/0x1720 [ 590.966648] ? ioctl_preallocate+0x300/0x300 [ 590.971511] ? selinux_file_mprotect+0x620/0x620 [ 590.976277] ? __sb_end_write+0xd9/0x110 [ 590.980349] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 590.985888] ? fput+0x130/0x1a0 [ 590.989203] ? do_syscall_64+0x9a/0x820 [ 590.993187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.998727] ? security_file_ioctl+0x94/0xc0 [ 591.003150] ksys_ioctl+0xa9/0xd0 [ 591.006613] __x64_sys_ioctl+0x73/0xb0 [ 591.010519] do_syscall_64+0x1b9/0x820 [ 591.014414] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 591.019786] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.024722] ? trace_hardirqs_on_caller+0x310/0x310 [ 591.029752] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 591.034778] ? recalc_sigpending_tsk+0x180/0x180 [ 591.039535] ? kasan_check_write+0x14/0x20 [ 591.043783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.048639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.053829] RIP: 0033:0x457679 [ 591.057028] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:33:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x69, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0xffffffffffffff70) [ 591.075929] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.083645] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 591.090916] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 591.098186] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 591.105468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 591.112765] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000d 00:33:39 executing program 5 (fault-call:4 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x9001000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x20002) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) 00:33:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x259, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 591.307949] FAULT_INJECTION: forcing a failure. [ 591.307949] name failslab, interval 1, probability 0, space 0, times 0 [ 591.329644] CPU: 0 PID: 1053 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 591.336865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.346227] Call Trace: [ 591.348828] dump_stack+0x1c4/0x2b4 [ 591.352476] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.357708] should_fail.cold.4+0xa/0x17 [ 591.361787] ? __kernel_text_address+0xd/0x40 [ 591.366294] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.371410] ? __save_stack_trace+0x8d/0xf0 [ 591.375753] ? graph_lock+0x170/0x170 [ 591.379568] ? graph_lock+0x170/0x170 [ 591.383376] ? save_stack+0xa9/0xd0 [ 591.383391] ? save_stack+0x43/0xd0 [ 591.383403] ? kasan_kmalloc+0xc7/0xe0 [ 591.383419] ? __kmalloc_node+0x47/0x70 [ 591.383438] ? find_held_lock+0x36/0x1c0 [ 591.383457] ? __lock_is_held+0xb5/0x140 00:33:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x230) [ 591.383494] ? ___might_sleep+0x1ed/0x300 [ 591.410923] ? arch_local_save_flags+0x40/0x40 [ 591.415522] ? __lock_is_held+0xb5/0x140 [ 591.419610] __should_failslab+0x124/0x180 [ 591.423865] should_failslab+0x9/0x14 [ 591.427678] kmem_cache_alloc+0x2be/0x730 [ 591.431834] ? kasan_kmalloc+0xc7/0xe0 [ 591.435751] ? mempool_free+0x370/0x370 [ 591.439738] mempool_alloc_slab+0x44/0x60 [ 591.443912] mempool_init_node+0x2d2/0x550 [ 591.448165] ? mempool_free+0x370/0x370 [ 591.452150] ? mempool_alloc_slab+0x60/0x60 [ 591.456494] mempool_init+0x3d/0x50 [ 591.460140] bioset_init+0x3d4/0x840 [ 591.463871] ? bioset_exit+0x370/0x370 [ 591.467789] blk_alloc_queue_node+0x280/0xe90 [ 591.472308] ? blk_init_allocated_queue+0x640/0x640 [ 591.477349] ? __mutex_init+0x1f7/0x290 [ 591.481361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.486912] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 591.491681] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 591.496363] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 591.501565] blk_mq_init_queue+0x4b/0xb0 [ 591.505638] loop_add+0x34c/0xa30 [ 591.509107] ? loop_queue_rq+0x690/0x690 [ 591.513184] loop_control_ioctl+0x199/0x530 [ 591.517516] ? loop_add+0xa30/0xa30 [ 591.521148] ? arch_local_save_flags+0x40/0x40 [ 591.525749] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 591.530693] ? loop_add+0xa30/0xa30 [ 591.534326] do_vfs_ioctl+0x1de/0x1720 [ 591.538225] ? ioctl_preallocate+0x300/0x300 [ 591.542645] ? selinux_file_mprotect+0x620/0x620 [ 591.547408] ? __sb_end_write+0xd9/0x110 [ 591.551478] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 591.557023] ? fput+0x130/0x1a0 [ 591.560310] ? do_syscall_64+0x9a/0x820 [ 591.564296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.569842] ? security_file_ioctl+0x94/0xc0 [ 591.574261] ksys_ioctl+0xa9/0xd0 [ 591.577727] __x64_sys_ioctl+0x73/0xb0 [ 591.581629] do_syscall_64+0x1b9/0x820 [ 591.585520] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 591.590887] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.595824] ? trace_hardirqs_on_caller+0x310/0x310 [ 591.600845] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 591.605867] ? recalc_sigpending_tsk+0x180/0x180 [ 591.610626] ? kasan_check_write+0x14/0x20 [ 591.614872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.619729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.624924] RIP: 0033:0x457679 [ 591.628123] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.647024] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:33:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x230, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:40 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480000, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x101, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 591.654739] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 591.662014] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 591.669285] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 591.676553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 591.683825] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000e 00:33:40 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xee000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:40 executing program 5 (fault-call:4 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc54b6d934c123b9c, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:33:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x280, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x448, 0x0, 0x118, 0x248, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1f, 0x1ff}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0xffffff00, @empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x96c9, 0x1, 0xb1, 0x9, 0x4, 0x5, 'lo\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0xc0}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0x1, 0x4}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, @mac, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}, 0x6, 0x3, 0x8, 0x712, 0x5, 0xdd4a, 'veth0_to_bridge\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x498) [ 592.467285] FAULT_INJECTION: forcing a failure. [ 592.467285] name failslab, interval 1, probability 0, space 0, times 0 [ 592.484796] CPU: 1 PID: 1087 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 592.492024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.501387] Call Trace: [ 592.503996] dump_stack+0x1c4/0x2b4 [ 592.507647] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.512875] should_fail.cold.4+0xa/0x17 00:33:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2e0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 592.516953] ? __kernel_text_address+0xd/0x40 [ 592.521470] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.526608] ? __save_stack_trace+0x8d/0xf0 [ 592.530951] ? graph_lock+0x170/0x170 [ 592.534765] ? graph_lock+0x170/0x170 [ 592.538582] ? save_stack+0xa9/0xd0 [ 592.542222] ? save_stack+0x43/0xd0 [ 592.545865] ? kasan_kmalloc+0xc7/0xe0 [ 592.549766] ? __kmalloc_node+0x47/0x70 [ 592.553760] ? find_held_lock+0x36/0x1c0 [ 592.557842] ? __lock_is_held+0xb5/0x140 [ 592.561921] ? ___might_sleep+0x1ed/0x300 [ 592.561940] ? arch_local_save_flags+0x40/0x40 [ 592.561953] ? __lock_is_held+0xb5/0x140 [ 592.561981] __should_failslab+0x124/0x180 [ 592.562003] should_failslab+0x9/0x14 [ 592.582798] kmem_cache_alloc+0x2be/0x730 [ 592.586962] ? kasan_kmalloc+0xc7/0xe0 [ 592.590871] ? mempool_free+0x370/0x370 [ 592.594863] mempool_alloc_slab+0x44/0x60 [ 592.599033] mempool_init_node+0x2d2/0x550 [ 592.603289] ? mempool_free+0x370/0x370 [ 592.607269] ? mempool_alloc_slab+0x60/0x60 [ 592.611595] mempool_init+0x3d/0x50 [ 592.615252] bioset_init+0x646/0x840 [ 592.618976] ? bioset_exit+0x370/0x370 [ 592.622874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.627899] blk_alloc_queue_node+0x280/0xe90 [ 592.632403] ? blk_init_allocated_queue+0x640/0x640 [ 592.637427] ? __mutex_init+0x1f7/0x290 [ 592.641427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.646971] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 592.651741] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 592.656420] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 592.661622] blk_mq_init_queue+0x4b/0xb0 [ 592.665695] loop_add+0x34c/0xa30 [ 592.669155] ? loop_queue_rq+0x690/0x690 [ 592.673231] loop_control_ioctl+0x199/0x530 [ 592.677565] ? loop_add+0xa30/0xa30 [ 592.681200] ? arch_local_save_flags+0x40/0x40 [ 592.685799] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 592.690737] ? loop_add+0xa30/0xa30 [ 592.694370] do_vfs_ioctl+0x1de/0x1720 [ 592.698282] ? ioctl_preallocate+0x300/0x300 [ 592.702702] ? selinux_file_mprotect+0x620/0x620 [ 592.707467] ? __sb_end_write+0xd9/0x110 [ 592.711547] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 592.717089] ? fput+0x130/0x1a0 [ 592.720374] ? do_syscall_64+0x9a/0x820 [ 592.724357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.729900] ? security_file_ioctl+0x94/0xc0 [ 592.734372] ksys_ioctl+0xa9/0xd0 [ 592.737832] __x64_sys_ioctl+0x73/0xb0 [ 592.741729] do_syscall_64+0x1b9/0x820 [ 592.745625] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 592.750992] ? syscall_return_slowpath+0x5e0/0x5e0 [ 592.755931] ? trace_hardirqs_on_caller+0x310/0x310 [ 592.760951] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 592.766083] ? recalc_sigpending_tsk+0x180/0x180 [ 592.770844] ? kasan_check_write+0x14/0x20 [ 592.775088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.779943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.785138] RIP: 0033:0x457679 [ 592.788334] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.807251] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:33:41 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 592.814974] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 592.822253] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 592.829531] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 592.836803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 592.844071] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000000f 00:33:41 executing program 5 (fault-call:4 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:41 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4500, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 592.948649] FAULT_INJECTION: forcing a failure. [ 592.948649] name failslab, interval 1, probability 0, space 0, times 0 [ 592.966001] CPU: 1 PID: 1101 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 592.973224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.982595] Call Trace: [ 592.985197] dump_stack+0x1c4/0x2b4 [ 592.988841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.994057] ? __kernel_text_address+0xd/0x40 [ 592.998566] ? unwind_get_return_address+0x61/0xa0 [ 593.003528] should_fail.cold.4+0xa/0x17 [ 593.007609] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 593.012724] ? save_stack+0xa9/0xd0 [ 593.016366] ? graph_lock+0x170/0x170 [ 593.020175] ? kasan_slab_alloc+0x12/0x20 [ 593.024334] ? kmem_cache_alloc+0x12e/0x730 [ 593.028671] ? mempool_alloc_slab+0x44/0x60 [ 593.033002] ? mempool_init_node+0x2d2/0x550 [ 593.037423] ? mempool_init+0x3d/0x50 [ 593.041239] ? graph_lock+0x170/0x170 [ 593.045064] ? loop_add+0x34c/0xa30 [ 593.048702] ? loop_control_ioctl+0x199/0x530 [ 593.053210] ? do_vfs_ioctl+0x1de/0x1720 [ 593.057288] ? ksys_ioctl+0xa9/0xd0 [ 593.060929] ? __x64_sys_ioctl+0x73/0xb0 [ 593.065001] ? do_syscall_64+0x1b9/0x820 [ 593.069072] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.074453] ? find_held_lock+0x36/0x1c0 [ 593.078545] ? __lock_is_held+0xb5/0x140 [ 593.082633] ? ___might_sleep+0x1ed/0x300 [ 593.086817] ? arch_local_save_flags+0x40/0x40 [ 593.091421] __should_failslab+0x124/0x180 [ 593.095676] should_failslab+0x9/0x14 [ 593.099501] kmem_cache_alloc+0x2be/0x730 [ 593.103661] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.109209] ? __phys_addr+0xa6/0x120 [ 593.113029] ? mempool_init+0x3d/0x50 [ 593.116845] ? mempool_free+0x370/0x370 [ 593.120836] mempool_alloc_slab+0x44/0x60 [ 593.124997] mempool_init_node+0x2d2/0x550 [ 593.129256] ? mempool_free+0x370/0x370 [ 593.133252] ? mempool_alloc_slab+0x60/0x60 [ 593.137591] mempool_init+0x3d/0x50 [ 593.141240] bioset_init+0x646/0x840 [ 593.144975] ? bioset_exit+0x370/0x370 [ 593.148882] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 593.153915] blk_alloc_queue_node+0x280/0xe90 [ 593.158429] ? blk_init_allocated_queue+0x640/0x640 [ 593.163471] ? __mutex_init+0x1f7/0x290 [ 593.167501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.173051] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 593.177822] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 593.182521] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 593.187735] blk_mq_init_queue+0x4b/0xb0 [ 593.191821] loop_add+0x34c/0xa30 [ 593.195294] ? loop_queue_rq+0x690/0x690 [ 593.199378] loop_control_ioctl+0x199/0x530 [ 593.203713] ? loop_add+0xa30/0xa30 [ 593.207359] ? arch_local_save_flags+0x40/0x40 [ 593.211960] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 593.216915] ? loop_add+0xa30/0xa30 [ 593.220557] do_vfs_ioctl+0x1de/0x1720 [ 593.224463] ? ioctl_preallocate+0x300/0x300 [ 593.228902] ? selinux_file_mprotect+0x620/0x620 [ 593.233674] ? __sb_end_write+0xd9/0x110 [ 593.237757] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 593.243304] ? fput+0x130/0x1a0 [ 593.246600] ? do_syscall_64+0x9a/0x820 [ 593.250594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.256149] ? security_file_ioctl+0x94/0xc0 [ 593.260576] ksys_ioctl+0xa9/0xd0 [ 593.264045] __x64_sys_ioctl+0x73/0xb0 [ 593.267949] do_syscall_64+0x1b9/0x820 [ 593.271852] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 593.277233] ? syscall_return_slowpath+0x5e0/0x5e0 [ 593.282186] ? trace_hardirqs_on_caller+0x310/0x310 [ 593.287214] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 593.292252] ? recalc_sigpending_tsk+0x180/0x180 [ 593.297019] ? kasan_check_write+0x14/0x20 [ 593.301280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.306143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.311339] RIP: 0033:0x457679 [ 593.314539] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.333448] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.341183] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 00:33:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x280000, 0x0) write$nbd(r0, &(0x7f0000000080)={0x67446698, 0x1, 0x3, 0x1, 0x4, "531da787209d71000464d6b4ae0f09fc6ac2261ec8986535c8b7c7fdaea6c1e750bd7827baca1c4a31"}, 0x39) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x90400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1600000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 593.348462] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 593.355751] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 593.363030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 593.370304] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000010 00:33:42 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x7300, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x277, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:42 executing program 5 (fault-call:4 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x9, 0x8001, 0x100000001, 0x7ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 00:33:42 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) gettid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 593.995074] FAULT_INJECTION: forcing a failure. [ 593.995074] name failslab, interval 1, probability 0, space 0, times 0 [ 594.018109] CPU: 1 PID: 1143 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 594.025321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.034679] Call Trace: [ 594.037295] dump_stack+0x1c4/0x2b4 00:33:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x800, 0x1) [ 594.040953] ? dump_stack_print_info.cold.2+0x52/0x52 [ 594.046165] ? __kernel_text_address+0xd/0x40 [ 594.050677] ? unwind_get_return_address+0x61/0xa0 [ 594.055630] should_fail.cold.4+0xa/0x17 [ 594.059709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 594.064821] ? save_stack+0xa9/0xd0 [ 594.068463] ? graph_lock+0x170/0x170 [ 594.072290] ? kasan_slab_alloc+0x12/0x20 [ 594.076451] ? kmem_cache_alloc+0x12e/0x730 [ 594.080794] ? mempool_alloc_slab+0x44/0x60 [ 594.085122] ? mempool_init_node+0x2d2/0x550 [ 594.089539] ? mempool_init+0x3d/0x50 syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x6, &(0x7f00000022c0)=[{&(0x7f00000000c0)="9f86d1dd23fa1da06eb5cf08be642ac99d557d7c527a5c13bb7dbf8347bba44ed898b5512353d0060f9009f92c055cc053e519b8501d25af6d8ba0df518ade062778b4359bd8a4e66d03d0c6cec93d7a0bb5283db7f4fb30c72fc08d7605b1d40cf039fdb9a58f1ce349504167e38a07b40887394d0e3818ea421975e8f138d08547b6df5121b382a466d9c94060898bf4654fd2a2ccb6ec02b50e2b5fd521bb35fadfa3b001519eac2c4b2b2811459fa23673c659be611669a3b9cd5d61758765261e1f4cee94ba8763d97ff4569d574ac93e6d94f609cf3d39a70a8d4ac729db904120a9b62a6acb4401374e", 0xed, 0x12c}, {&(0x7f00000001c0)="571c60e158a9511b6a7b5f5633dd05", 0xf, 0x6535}, {&(0x7f0000000200)="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", 0x1000, 0x80}, {&(0x7f0000001200)="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", 0x1000, 0x7}, {&(0x7f0000002200)="80769fdf6f4730750819eaae165c3a0af47749050e", 0x15, 0x5}, {&(0x7f0000002240)="54028ca2e990a81a24b555ffc68ffcaa1fd45d6166d64a083b46c8b4df859a3b1bf37e048ba78fb5e8c98f39a2d1f8e515120b962e36c255a8f82ac9129582b606fa654cecfe42e67ebccb556bbca6845509d22017db1bef8c138175e40527bd67c54cd5d73f8c553426062cdab402eab6d9e606b899ee32ead6107985", 0x7d, 0x1}], 0x8000b, &(0x7f0000002380)={[{@nodatacow='nodatacow'}, {@device={'device', 0x3d, './file0'}}, {@noacl='noacl'}, {@datasum='datasum'}, {@clear_cache='clear_cache'}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/rfkill\x00', 0x141000, 0x0) write$P9_RREADDIR(r1, &(0x7f0000002400)={0xac, 0x29, 0x2, {0x0, [{{0x8, 0x1, 0x1}, 0x2, 0x400, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x3, 0x1fffc00, 0x7, './file0'}, {{0x0, 0x1, 0x6}, 0x1, 0x5, 0x7, './file0'}, {{0x8, 0x3, 0x8}, 0x5e7c, 0x0, 0xd, './file0/file0'}, {{0xa0, 0x0, 0x7}, 0x7, 0x5, 0x7, './file0'}]}}, 0xac) [ 594.093353] ? graph_lock+0x170/0x170 [ 594.097168] ? loop_add+0x34c/0xa30 [ 594.100811] ? loop_control_ioctl+0x199/0x530 [ 594.105318] ? do_vfs_ioctl+0x1de/0x1720 [ 594.109401] ? ksys_ioctl+0xa9/0xd0 [ 594.113039] ? __x64_sys_ioctl+0x73/0xb0 [ 594.117116] ? do_syscall_64+0x1b9/0x820 [ 594.121189] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.126573] ? find_held_lock+0x36/0x1c0 [ 594.130658] ? __lock_is_held+0xb5/0x140 [ 594.134750] ? ___might_sleep+0x1ed/0x300 [ 594.138917] ? arch_local_save_flags+0x40/0x40 [ 594.143528] __should_failslab+0x124/0x180 [ 594.147773] should_failslab+0x9/0x14 [ 594.151583] kmem_cache_alloc+0x2be/0x730 [ 594.155738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.161280] ? __phys_addr+0xa6/0x120 [ 594.165084] ? mempool_init+0x3d/0x50 [ 594.168888] ? mempool_free+0x370/0x370 [ 594.172866] mempool_alloc_slab+0x44/0x60 [ 594.177021] mempool_init_node+0x2d2/0x550 [ 594.181272] ? mempool_free+0x370/0x370 [ 594.185253] ? mempool_alloc_slab+0x60/0x60 [ 594.189582] mempool_init+0x3d/0x50 [ 594.193224] bioset_init+0x646/0x840 [ 594.196955] ? bioset_exit+0x370/0x370 [ 594.200860] blk_alloc_queue_node+0x280/0xe90 [ 594.205365] ? blk_init_allocated_queue+0x640/0x640 [ 594.210387] ? __mutex_init+0x1f7/0x290 [ 594.214387] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.219928] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 594.224696] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 594.229385] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 594.234617] blk_mq_init_queue+0x4b/0xb0 [ 594.238690] loop_add+0x34c/0xa30 [ 594.242153] ? loop_queue_rq+0x690/0x690 [ 594.246238] loop_control_ioctl+0x199/0x530 [ 594.250577] ? loop_add+0xa30/0xa30 [ 594.254212] ? arch_local_save_flags+0x40/0x40 [ 594.258808] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 594.263751] ? loop_add+0xa30/0xa30 [ 594.267385] do_vfs_ioctl+0x1de/0x1720 [ 594.271546] ? ioctl_preallocate+0x300/0x300 [ 594.275969] ? selinux_file_mprotect+0x620/0x620 [ 594.280733] ? __sb_end_write+0xd9/0x110 [ 594.284865] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 594.290404] ? fput+0x130/0x1a0 [ 594.293691] ? do_syscall_64+0x9a/0x820 [ 594.297675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.303219] ? security_file_ioctl+0x94/0xc0 [ 594.307644] ksys_ioctl+0xa9/0xd0 [ 594.311111] __x64_sys_ioctl+0x73/0xb0 [ 594.315008] do_syscall_64+0x1b9/0x820 [ 594.318903] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 594.324288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 594.329223] ? trace_hardirqs_on_caller+0x310/0x310 [ 594.334257] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 594.339279] ? recalc_sigpending_tsk+0x180/0x180 [ 594.344041] ? kasan_check_write+0x14/0x20 [ 594.348284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.353142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.358333] RIP: 0033:0x457679 [ 594.361532] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.380431] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.388164] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 00:33:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x4, 0x7fff, 0x1000000000, 0x7fff}, {0xceb, 0x81, 0x9}, {0xffffffff, 0x8, 0xffff, 0x83}, {0x100000000, 0x9, 0x6}]}, 0x10) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x26a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 594.395447] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 594.403179] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 594.410447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 594.417738] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000011 00:33:42 executing program 5 (fault-call:4 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xf800000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:42 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 594.650567] FAULT_INJECTION: forcing a failure. [ 594.650567] name failslab, interval 1, probability 0, space 0, times 0 [ 594.664559] CPU: 1 PID: 1168 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 594.671770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.681127] Call Trace: [ 594.683756] dump_stack+0x1c4/0x2b4 [ 594.687411] ? dump_stack_print_info.cold.2+0x52/0x52 [ 594.692620] ? ksys_ioctl+0xa9/0xd0 [ 594.696270] ? __x64_sys_ioctl+0x73/0xb0 [ 594.700347] ? do_syscall_64+0x1b9/0x820 [ 594.704423] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.709805] should_fail.cold.4+0xa/0x17 [ 594.713885] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 594.719013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.724568] ? graph_lock+0x170/0x170 [ 594.728383] ? graph_lock+0x170/0x170 [ 594.732201] ? __lock_is_held+0xb5/0x140 [ 594.736285] ? find_held_lock+0x36/0x1c0 [ 594.740366] ? __lock_is_held+0xb5/0x140 [ 594.744453] ? ___might_sleep+0x1ed/0x300 [ 594.748624] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 594.753655] ? arch_local_save_flags+0x40/0x40 [ 594.758267] __should_failslab+0x124/0x180 [ 594.762528] should_failslab+0x9/0x14 [ 594.766346] kmem_cache_alloc_node_trace+0x270/0x740 [ 594.771474] ? bioset_exit+0x370/0x370 [ 594.775390] bdi_alloc_node+0x67/0xe0 [ 594.779207] blk_alloc_queue_node+0x2b0/0xe90 [ 594.783726] ? blk_init_allocated_queue+0x640/0x640 [ 594.783744] ? __mutex_init+0x1f7/0x290 [ 594.783782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.792758] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 594.792781] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 594.792805] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 594.792828] blk_mq_init_queue+0x4b/0xb0 [ 594.792852] loop_add+0x34c/0xa30 [ 594.820470] ? loop_queue_rq+0x690/0x690 [ 594.824577] loop_control_ioctl+0x199/0x530 [ 594.828911] ? loop_add+0xa30/0xa30 [ 594.832552] ? arch_local_save_flags+0x40/0x40 [ 594.837153] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 594.842099] ? loop_add+0xa30/0xa30 [ 594.845739] do_vfs_ioctl+0x1de/0x1720 [ 594.849648] ? ioctl_preallocate+0x300/0x300 [ 594.854079] ? selinux_file_mprotect+0x620/0x620 [ 594.858851] ? __sb_end_write+0xd9/0x110 [ 594.862931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 594.868477] ? fput+0x130/0x1a0 [ 594.871780] ? do_syscall_64+0x9a/0x820 [ 594.875774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.881324] ? security_file_ioctl+0x94/0xc0 [ 594.885749] ksys_ioctl+0xa9/0xd0 [ 594.889218] __x64_sys_ioctl+0x73/0xb0 [ 594.893130] do_syscall_64+0x1b9/0x820 [ 594.897030] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 594.902410] ? syscall_return_slowpath+0x5e0/0x5e0 [ 594.907356] ? trace_hardirqs_on_caller+0x310/0x310 [ 594.912386] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 594.917413] ? recalc_sigpending_tsk+0x180/0x180 [ 594.922182] ? kasan_check_write+0x14/0x20 [ 594.926441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.931308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.936520] RIP: 0033:0x457679 [ 594.939724] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.958639] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.966364] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 594.973653] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 594.980934] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 594.988211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 594.995502] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000012 00:33:43 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x153, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'team0\x00', 0x4}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="5bcc10b3fb812deac79f7156b71950443764fbeeef5a8369bdf10fa1711151e3fd42760173650465e1702d2ddfe4d9c3f19db6090c1d9278ade2f99b354f4e2fe26c056cae4832a575f8a489031ad6e8c1e810b220cf2abfc58dd91cd4224947f8e672287c", 0x65, 0x40010, &(0x7f0000000180)={0x11, 0x1a, r2, 0x1, 0x495c, 0x6, @random="0162adb42e4e"}, 0x14) 00:33:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x2a202, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000002c0)={0x9, 0x7}) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7f, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) 00:33:43 executing program 5 (fault-call:4 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6c01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 595.444924] FAULT_INJECTION: forcing a failure. [ 595.444924] name failslab, interval 1, probability 0, space 0, times 0 [ 595.463186] CPU: 0 PID: 1191 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 595.470402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.479767] Call Trace: [ 595.482373] dump_stack+0x1c4/0x2b4 [ 595.486023] ? dump_stack_print_info.cold.2+0x52/0x52 [ 595.491238] ? mark_held_locks+0xc7/0x130 00:33:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 595.495412] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 595.500533] should_fail.cold.4+0xa/0x17 [ 595.504604] ? kasan_check_read+0x11/0x20 [ 595.508777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 595.513936] ? kasan_check_write+0x14/0x20 [ 595.518186] ? graph_lock+0x170/0x170 [ 595.522005] ? graph_lock+0x170/0x170 [ 595.525815] ? trace_hardirqs_on+0xbd/0x310 [ 595.525833] ? kasan_check_read+0x11/0x20 [ 595.534288] ? __debug_object_init+0x57d/0x1290 [ 595.534305] ? graph_lock+0x170/0x170 [ 595.534326] ? find_held_lock+0x36/0x1c0 [ 595.534346] ? __lock_is_held+0xb5/0x140 [ 595.534376] ? ___might_sleep+0x1ed/0x300 [ 595.555048] ? arch_local_save_flags+0x40/0x40 [ 595.559648] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 595.564794] __should_failslab+0x124/0x180 [ 595.569063] should_failslab+0x9/0x14 [ 595.572875] kmem_cache_alloc_trace+0x2d7/0x750 [ 595.577574] ? kasan_check_write+0x14/0x20 [ 595.581816] ? do_raw_spin_lock+0xc1/0x200 [ 595.586060] wb_congested_get_create+0x1d2/0x460 [ 595.590824] ? wb_wakeup_delayed+0xf0/0xf0 [ 595.595063] ? __lockdep_init_map+0x105/0x590 [ 595.599566] wb_init+0x636/0x9e0 [ 595.602941] ? bdi_put+0x180/0x180 [ 595.606491] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 595.611773] ? __lockdep_init_map+0x105/0x590 [ 595.616272] ? loop_add+0x34c/0xa30 [ 595.619903] ? lockdep_init_map+0x9/0x10 [ 595.623967] ? debug_mutex_init+0x2d/0x60 [ 595.628124] ? __ia32_sys_membarrier+0x150/0x150 [ 595.632884] ? __lockdep_init_map+0x105/0x590 [ 595.637388] ? __init_waitqueue_head+0x9e/0x150 [ 595.642060] ? init_wait_entry+0x1c0/0x1c0 [ 595.646309] bdi_init+0x375/0x540 [ 595.649769] ? wb_init+0x9e0/0x9e0 [ 595.653320] ? bdi_alloc_node+0x67/0xe0 [ 595.657292] ? bdi_alloc_node+0x67/0xe0 [ 595.661272] ? rcu_read_lock_sched_held+0x108/0x120 [ 595.666298] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 595.671579] ? bioset_exit+0x370/0x370 [ 595.675475] bdi_alloc_node+0x81/0xe0 [ 595.679291] blk_alloc_queue_node+0x2b0/0xe90 [ 595.683791] ? blk_init_allocated_queue+0x640/0x640 [ 595.688807] ? __mutex_init+0x1f7/0x290 [ 595.692837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.698375] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 595.703131] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 595.707822] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 595.713019] blk_mq_init_queue+0x4b/0xb0 [ 595.717084] loop_add+0x34c/0xa30 [ 595.720542] ? loop_queue_rq+0x690/0x690 [ 595.724614] loop_control_ioctl+0x199/0x530 [ 595.728939] ? loop_add+0xa30/0xa30 [ 595.732574] ? arch_local_save_flags+0x40/0x40 [ 595.737168] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 595.742108] ? loop_add+0xa30/0xa30 [ 595.745788] do_vfs_ioctl+0x1de/0x1720 [ 595.749689] ? ioctl_preallocate+0x300/0x300 [ 595.754109] ? selinux_file_mprotect+0x620/0x620 [ 595.758908] ? __sb_end_write+0xd9/0x110 [ 595.763001] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.768558] ? fput+0x130/0x1a0 [ 595.771842] ? do_syscall_64+0x9a/0x820 [ 595.775824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.781362] ? security_file_ioctl+0x94/0xc0 [ 595.785781] ksys_ioctl+0xa9/0xd0 [ 595.789241] __x64_sys_ioctl+0x73/0xb0 [ 595.793134] do_syscall_64+0x1b9/0x820 [ 595.797022] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 595.802394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 595.807329] ? trace_hardirqs_on_caller+0x310/0x310 [ 595.812348] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 595.817369] ? recalc_sigpending_tsk+0x180/0x180 [ 595.822125] ? kasan_check_write+0x14/0x20 [ 595.826366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.831220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.836409] RIP: 0033:0x457679 [ 595.839608] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.858518] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.866228] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 595.873502] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 595.880776] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 595.888042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:33:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xad, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 595.895308] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000013 00:33:44 executing program 5 (fault-call:4 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4100000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x3}, 0x1c) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040)=0x101, 0xfffffffffffffdf9) [ 596.045951] FAULT_INJECTION: forcing a failure. [ 596.045951] name failslab, interval 1, probability 0, space 0, times 0 [ 596.072609] CPU: 1 PID: 1206 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 596.079843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.089213] Call Trace: [ 596.091827] dump_stack+0x1c4/0x2b4 [ 596.095477] ? dump_stack_print_info.cold.2+0x52/0x52 [ 596.100699] ? ksys_ioctl+0xa9/0xd0 [ 596.104338] ? __x64_sys_ioctl+0x73/0xb0 [ 596.108422] ? do_syscall_64+0x1b9/0x820 [ 596.112507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.117890] ? find_held_lock+0x36/0x1c0 [ 596.121982] should_fail.cold.4+0xa/0x17 [ 596.126067] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.131191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.136746] ? graph_lock+0x170/0x170 [ 596.140561] ? graph_lock+0x170/0x170 [ 596.140580] ? __lock_is_held+0xb5/0x140 [ 596.140602] ? find_held_lock+0x36/0x1c0 [ 596.140620] ? __lock_is_held+0xb5/0x140 [ 596.148490] ? ___might_sleep+0x1ed/0x300 [ 596.148509] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.148528] ? arch_local_save_flags+0x40/0x40 [ 596.148556] __should_failslab+0x124/0x180 [ 596.174627] should_failslab+0x9/0x14 [ 596.178456] kmem_cache_alloc_node_trace+0x270/0x740 [ 596.183614] ? bioset_exit+0x370/0x370 [ 596.187555] bdi_alloc_node+0x67/0xe0 [ 596.191387] blk_alloc_queue_node+0x2b0/0xe90 [ 596.195891] ? blk_init_allocated_queue+0x640/0x640 [ 596.200913] ? __mutex_init+0x1f7/0x290 [ 596.204914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.210460] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 596.215235] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 596.219921] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 596.225121] blk_mq_init_queue+0x4b/0xb0 [ 596.229192] loop_add+0x34c/0xa30 [ 596.232660] ? loop_queue_rq+0x690/0x690 [ 596.236737] loop_control_ioctl+0x199/0x530 [ 596.241065] ? loop_add+0xa30/0xa30 [ 596.244709] ? arch_local_save_flags+0x40/0x40 [ 596.249304] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 596.254252] ? loop_add+0xa30/0xa30 [ 596.257883] do_vfs_ioctl+0x1de/0x1720 [ 596.261784] ? ioctl_preallocate+0x300/0x300 [ 596.266204] ? selinux_file_mprotect+0x620/0x620 [ 596.271255] ? __sb_end_write+0xd9/0x110 [ 596.275325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 596.280865] ? fput+0x130/0x1a0 [ 596.284148] ? do_syscall_64+0x9a/0x820 [ 596.288160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.293708] ? security_file_ioctl+0x94/0xc0 [ 596.298128] ksys_ioctl+0xa9/0xd0 [ 596.301591] __x64_sys_ioctl+0x73/0xb0 [ 596.305495] do_syscall_64+0x1b9/0x820 [ 596.309392] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 596.314764] ? syscall_return_slowpath+0x5e0/0x5e0 [ 596.319704] ? trace_hardirqs_on_caller+0x310/0x310 [ 596.324732] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.329754] ? recalc_sigpending_tsk+0x180/0x180 [ 596.334524] ? kasan_check_write+0x14/0x20 [ 596.338774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.343629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.348820] RIP: 0033:0x457679 [ 596.352019] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.370927] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.378651] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 596.385930] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 00:33:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x25b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 596.393205] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 596.400995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 596.408274] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000014 00:33:45 executing program 5 (fault-call:4 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x100, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000001c0)=0xa9) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x4, 0x15, 0x200, 0x0, 0x8, 0x1000, r3}, &(0x7f0000000240)=0x20) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x200) 00:33:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x101000) ioctl$KDMKTONE(r1, 0x4b30, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x7fffffff, 0x1000, 0x1, 0x40d, 0xffffffffffff0001, 0x417, 0xfffffffffffff184, 0x1000, 0x0}, &(0x7f00000000c0)=0x20) openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x185b03e4}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) 00:33:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xe3000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:45 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x203, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:45 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/137) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x3, &(0x7f0000000280)={0x0, 0x3f, 0x4, @thr={&(0x7f0000000180)="7936febab4d434b2fa1a9b95cdb889fc781721d45fbde97d0770f3bacc925bbd9cb4e2cc299e0948ab87476a4c5cddac5a610021542eaba6b54604ed45fb4904022fdc075565891e22054d3a290a72", &(0x7f0000000200)="4869bd6999a91dd3c95d9619ec2d7ec81ef04f61d054c67aed28024c9a5259fb3d91e3f1b4d95f1b5be9a896b2ea29f704219c8f1d6da99f7021f09fd883023ac7332cf9852c9d5d1eba9988a1abc3180df55e9245909cea77"}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x10000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x8) [ 596.837996] FAULT_INJECTION: forcing a failure. [ 596.837996] name failslab, interval 1, probability 0, space 0, times 0 [ 596.876481] CPU: 1 PID: 1243 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 596.883783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.893147] Call Trace: [ 596.895750] dump_stack+0x1c4/0x2b4 [ 596.899399] ? dump_stack_print_info.cold.2+0x52/0x52 [ 596.904608] ? print_usage_bug+0xc0/0xc0 [ 596.908687] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 596.913726] should_fail.cold.4+0xa/0x17 [ 596.917805] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.922920] ? kasan_check_write+0x14/0x20 [ 596.927174] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 596.932121] ? graph_lock+0x170/0x170 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000001680)='/dev/input/mice\x00', 0x0, 0x10000) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x2dc) fchmod(r1, 0x183) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x0) 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getitimer(0x1, &(0x7f0000000080)) r2 = dup3(r1, r0, 0x80000) r3 = gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r3, r4, 0xc, &(0x7f0000000100)={0x1a, 0x9, 0xff, 0x8000}) accept$unix(r2, 0x0, &(0x7f0000000a40)) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000), 0xffffffffffffff26) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), 0x10) 00:33:45 executing program 0: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x101, 0xfffffffffffffdfd) [ 596.935936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.941496] ? graph_lock+0x170/0x170 [ 596.945318] ? find_held_lock+0x36/0x1c0 [ 596.949397] ? __lock_is_held+0xb5/0x140 [ 596.953497] ? ___might_sleep+0x1ed/0x300 [ 596.957663] ? arch_local_save_flags+0x40/0x40 [ 596.962281] ? pcpu_balance_workfn+0x1740/0x1740 [ 596.967061] __should_failslab+0x124/0x180 [ 596.971314] should_failslab+0x9/0x14 [ 596.975130] kmem_cache_alloc_node_trace+0x270/0x740 [ 596.980242] ? debug_object_free+0x690/0x690 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x201, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x3, @loopback, 0x9}, @in={0x2, 0x4e23, @multicast2}], 0x2c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000080)={{0x8, 0xae, 0x20000000000007, 0x9, 0x2, 0x40}, 0xc00000000000, 0xdc84, 0x101, 0x8, 0x8, "f581c2ae96129f31cca18bc4a87c5444bf45db3563f40c36819f6557d005769c7c9e416c636d99d1ac5c719f04ffaeee69f9417afec5de1575dcf05bb64c8a1580a3256ffb54d326b15ed4d41401e0fb6976625517252c3f960ac37d1a039b070f53ea4b1406a5188b9336d5076c205e4d8d7f23962a46308d30e7a2d47547f8"}) [ 596.984667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.990218] ? check_preemption_disabled+0x48/0x200 [ 596.995271] blkg_alloc+0x124/0x800 [ 596.998922] ? blkcg_reset_stats+0x3e0/0x3e0 [ 597.003340] ? lockdep_init_map+0x9/0x10 [ 597.007415] ? debug_mutex_init+0x2d/0x60 [ 597.011574] ? __mutex_init+0x1f7/0x290 [ 597.015559] ? __lockdep_init_map+0x105/0x590 [ 597.020073] ? kasan_check_write+0x14/0x20 [ 597.024322] ? percpu_ref_init+0x1fd/0x290 [ 597.028569] ? blk_delay_queue+0x1a0/0x1a0 [ 597.032821] ? percpu_ref_noop_confirm_switch+0x10/0x10 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x101000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000080)="87d1fc4035bad4aead34eda6b62339c5802410cc3f61acf78d95948c9144329a4a8b526d417072f2aadf31f4e4831d9034344598e2970f54ec49b2f01539ae949987aafe656c383a5a700e827ebcce874bb2bfdf4729ab18f9fd035445ea8c20251353e5", &(0x7f0000000100)=""/35}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='/dev/dmmidi#\x00', 0x0) socketpair$inet6(0xa, 0x0, 0x6, &(0x7f0000000180)) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000240)=0x400, 0x1) [ 597.038206] blkcg_init_queue+0x27/0x560 [ 597.042297] blk_alloc_queue_node+0x949/0xe90 [ 597.046819] ? blk_init_allocated_queue+0x640/0x640 [ 597.051855] ? __mutex_init+0x1f7/0x290 [ 597.055865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.061412] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 597.066191] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 597.071408] blk_mq_init_queue+0x4b/0xb0 [ 597.075504] loop_add+0x34c/0xa30 [ 597.078975] ? loop_queue_rq+0x690/0x690 [ 597.083067] loop_control_ioctl+0x199/0x530 [ 597.087410] ? loop_add+0xa30/0xa30 [ 597.091057] ? arch_local_save_flags+0x40/0x40 [ 597.095664] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 597.100618] ? loop_add+0xa30/0xa30 [ 597.104270] do_vfs_ioctl+0x1de/0x1720 [ 597.108179] ? ioctl_preallocate+0x300/0x300 [ 597.112609] ? selinux_file_mprotect+0x620/0x620 [ 597.117385] ? __sb_end_write+0xd9/0x110 [ 597.121468] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 597.127030] ? fput+0x130/0x1a0 [ 597.130328] ? do_syscall_64+0x9a/0x820 [ 597.134326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.139876] ? security_file_ioctl+0x94/0xc0 [ 597.144307] ksys_ioctl+0xa9/0xd0 [ 597.147775] __x64_sys_ioctl+0x73/0xb0 [ 597.151681] do_syscall_64+0x1b9/0x820 [ 597.155580] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 597.160961] ? syscall_return_slowpath+0x5e0/0x5e0 [ 597.165903] ? trace_hardirqs_on_caller+0x310/0x310 [ 597.170917] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 597.175924] ? recalc_sigpending_tsk+0x180/0x180 [ 597.180671] ? kasan_check_write+0x14/0x20 [ 597.185000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.189848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.195036] RIP: 0033:0x457679 [ 597.198216] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.217126] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.224829] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 597.232090] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 597.239349] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 597.246612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 597.253877] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000015 00:33:45 executing program 5 (fault-call:4 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r2, 0x120, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x110d7163}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0x78}}, 0x80) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) 00:33:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x7e, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3e010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 597.434517] FAULT_INJECTION: forcing a failure. [ 597.434517] name failslab, interval 1, probability 0, space 0, times 0 [ 597.453690] CPU: 1 PID: 1281 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 597.460926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.470294] Call Trace: [ 597.472906] dump_stack+0x1c4/0x2b4 [ 597.476565] ? dump_stack_print_info.cold.2+0x52/0x52 [ 597.481779] ? blkg_create+0x944/0x16c0 [ 597.485771] should_fail.cold.4+0xa/0x17 [ 597.489860] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 597.494981] ? do_raw_spin_unlock+0xa7/0x2f0 [ 597.499406] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 597.504005] ? graph_lock+0x170/0x170 [ 597.507815] ? do_raw_spin_lock+0xc1/0x200 [ 597.512069] ? graph_lock+0x170/0x170 [ 597.515886] ? _raw_spin_unlock+0x2c/0x50 [ 597.520051] ? blkg_create+0x949/0x16c0 [ 597.524053] ? find_held_lock+0x36/0x1c0 [ 597.528141] ? __lock_is_held+0xb5/0x140 [ 597.532231] ? ___might_sleep+0x1ed/0x300 [ 597.536407] ? arch_local_save_flags+0x40/0x40 [ 597.541004] ? find_held_lock+0x36/0x1c0 [ 597.545094] __should_failslab+0x124/0x180 [ 597.549353] should_failslab+0x9/0x14 [ 597.553171] kmem_cache_alloc_trace+0x2d7/0x750 [ 597.557853] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 597.563664] ? kasan_check_read+0x11/0x20 [ 597.567828] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 597.573126] ? rcu_bh_qs+0xc0/0xc0 [ 597.576691] blk_iolatency_init+0x51/0x2d0 [ 597.580954] blkcg_init_queue+0x1e3/0x560 [ 597.585124] blk_alloc_queue_node+0x949/0xe90 [ 597.589639] ? blk_init_allocated_queue+0x640/0x640 [ 597.594668] ? __mutex_init+0x1f7/0x290 [ 597.598678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.604223] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 597.609010] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 597.614220] blk_mq_init_queue+0x4b/0xb0 [ 597.618301] loop_add+0x34c/0xa30 [ 597.621777] ? loop_queue_rq+0x690/0x690 [ 597.625864] loop_control_ioctl+0x199/0x530 [ 597.630200] ? loop_add+0xa30/0xa30 [ 597.633842] ? arch_local_save_flags+0x40/0x40 [ 597.638446] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 597.643404] ? loop_add+0xa30/0xa30 [ 597.647045] do_vfs_ioctl+0x1de/0x1720 [ 597.650952] ? ioctl_preallocate+0x300/0x300 [ 597.655379] ? selinux_file_mprotect+0x620/0x620 [ 597.660154] ? __sb_end_write+0xd9/0x110 [ 597.664236] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 597.669789] ? fput+0x130/0x1a0 [ 597.673080] ? do_syscall_64+0x9a/0x820 [ 597.677076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.682631] ? security_file_ioctl+0x94/0xc0 [ 597.687060] ksys_ioctl+0xa9/0xd0 [ 597.690540] __x64_sys_ioctl+0x73/0xb0 [ 597.694446] do_syscall_64+0x1b9/0x820 [ 597.698357] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 597.703749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 597.708695] ? trace_hardirqs_on_caller+0x310/0x310 [ 597.713732] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 597.718764] ? recalc_sigpending_tsk+0x180/0x180 [ 597.723534] ? kasan_check_write+0x14/0x20 [ 597.727792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.732660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.737863] RIP: 0033:0x457679 [ 597.741069] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.759985] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.767715] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 597.774999] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 597.782285] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 597.789565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 597.796844] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000016 00:33:46 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x30, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x10000000007, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x8, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffff208, 0xc0000) write$P9_RWRITE(r1, &(0x7f0000000480)={0xb, 0x77, 0x2, 0x74}, 0xb) open(&(0x7f00000004c0)='./file0\x00', 0x4000, 0x2) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="1512ffdb94dca1e9456a5520419d1d65e7634610ee0e2fe930770a60ef96d5ca2599a411bc4d428246e9602a4f8228c70a3838a1261e810aca8cbbeb0f6cfb6dc188c8ed78ff13d5aa5aa590342235deacf54ce2049f886638aa1edfd02baffa2e7c86ac3ad3f23c34a74870f4b80c9022b267639de1a0465d93ab77cab7e0a8ab38b729b2a5408310abc9e90af2d9fff0facf5e66", 0x95}, {&(0x7f0000000140)="fe9fa8efff5358858d15ba1027027b7965fa1084c4d13780c5afca28ccc53412d9c41f2aa0f72c3516bda85d817837a3bafac1904e956339652b06ead23e8c135e9b5f779c90c3d2ff15d2e9074f9fc03d60e2b3cc779945ddaca319e315684a51d3998a93a401bc94eff36dc0ecf7f69f379f632239", 0x76}, {&(0x7f00000001c0)="03e4c9320eeac3ac833d9af451", 0xd}, {&(0x7f0000000200)="d65f1b3f7ad0c485594e1183b3cf53213f1c8ef0926bae84822bec5a21d4b1dc4163891486e6823c88559ec90d704edafed3fd4991e00dba062538016167b62e252b4b9cb873bc1832c5b9759ee439f6a694a7819990dbb93b173b2ac14a684ebe664930c780a98f081af3e11714be550699b84b06d4eb2ac6f1ced64fed2203f329ab65bbb6359521a4f529285dcb29f26f037ae56b142282cedae25beb24ae4477e8181b2704669f3e0c52a344c78770b9e5ef646aec7c1a151c7af72c15248e220a0c6f", 0xc5}, {&(0x7f0000000300)="083bcf988c2f9b55024f991d334925ecdbbe016d66003af1a1c5b10e41a7addaeebd1157b18f4a13d48cb42307b044198be4c6f531bf6c168b7cc8830909972d9511e8612535fb62b46ccdc712ed552d3a701c574954783cea1114c747078a9156f9a6430451b3dc664b8c0c5662e46134e2e3c06ca38661d9d968daeb7b2578", 0x80}, {&(0x7f0000000380)="d51ec74f1974351a59cca1a4342393b44f4a6809d39bb851f5c41bd7c41a6567be538855a0865f8d68b1d14a364af42a60dd84d5471ef312b75edc7e45cf5726f00c2e9a1850d52d4bed22eee0b3017521d9228b47af9fa9d66c21a0bc6bf2c292eeeb0dd616", 0x66}], 0x6, 0x2) 00:33:46 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000002300)={0x4, &(0x7f0000000040)=""/235, &(0x7f0000002280)=[{0x1, 0x1000, 0x1, &(0x7f0000000140)=""/4096}, {0x1ff, 0x1000, 0x8, &(0x7f0000001140)=""/4096}, {0x7f, 0xb1, 0x7, &(0x7f0000002140)=""/177}, {0x3, 0x48, 0x43319e57, &(0x7f0000002200)=""/72}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 00:33:46 executing program 5 (fault-call:4 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:46 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x85000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 598.355448] FAULT_INJECTION: forcing a failure. [ 598.355448] name failslab, interval 1, probability 0, space 0, times 0 [ 598.366998] CPU: 0 PID: 1301 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 598.374205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.383574] Call Trace: [ 598.386187] dump_stack+0x1c4/0x2b4 [ 598.389839] ? dump_stack_print_info.cold.2+0x52/0x52 [ 598.395056] ? mark_held_locks+0x130/0x130 [ 598.399312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.405191] ? check_preemption_disabled+0x48/0x200 [ 598.410234] should_fail.cold.4+0xa/0x17 [ 598.414317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 598.419452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 598.425030] ? pcpu_balance_workfn+0x1740/0x1740 [ 598.429810] ? graph_lock+0x170/0x170 [ 598.433630] ? check_preemption_disabled+0x48/0x200 [ 598.438658] ? check_preemption_disabled+0x48/0x200 [ 598.443701] ? lock_acquire+0x1ed/0x520 [ 598.447698] __should_failslab+0x124/0x180 [ 598.451957] should_failslab+0x9/0x14 [ 598.455780] kmem_cache_alloc_node_trace+0x5a/0x740 [ 598.460814] ? blkcg_activate_policy+0x12c/0x580 [ 598.465584] ? trace_hardirqs_on+0x310/0x310 [ 598.470014] iolatency_pd_alloc+0x75/0x130 [ 598.474262] ? iolatency_set_limit+0x620/0x620 [ 598.478863] blkcg_activate_policy+0x221/0x580 [ 598.483469] blk_iolatency_init+0x130/0x2d0 [ 598.487822] blkcg_init_queue+0x1e3/0x560 [ 598.491989] blk_alloc_queue_node+0x949/0xe90 [ 598.496511] ? blk_init_allocated_queue+0x640/0x640 [ 598.501547] ? __mutex_init+0x1f7/0x290 [ 598.505561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.511117] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 598.515905] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 598.521117] blk_mq_init_queue+0x4b/0xb0 [ 598.525199] loop_add+0x34c/0xa30 [ 598.528669] ? loop_queue_rq+0x690/0x690 [ 598.532763] loop_control_ioctl+0x199/0x530 [ 598.537104] ? loop_add+0xa30/0xa30 [ 598.540758] ? arch_local_save_flags+0x40/0x40 [ 598.545367] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 598.550327] ? loop_add+0xa30/0xa30 [ 598.553972] do_vfs_ioctl+0x1de/0x1720 [ 598.557884] ? ioctl_preallocate+0x300/0x300 [ 598.562315] ? selinux_file_mprotect+0x620/0x620 [ 598.567092] ? __sb_end_write+0xd9/0x110 [ 598.571171] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 598.576723] ? fput+0x130/0x1a0 [ 598.580028] ? do_syscall_64+0x9a/0x820 [ 598.584028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.589592] ? security_file_ioctl+0x94/0xc0 [ 598.594024] ksys_ioctl+0xa9/0xd0 [ 598.597511] __x64_sys_ioctl+0x73/0xb0 [ 598.601418] do_syscall_64+0x1b9/0x820 [ 598.605318] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 598.610697] ? syscall_return_slowpath+0x5e0/0x5e0 [ 598.615643] ? trace_hardirqs_on_caller+0x310/0x310 [ 598.620676] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 598.625702] ? recalc_sigpending_tsk+0x180/0x180 [ 598.630469] ? kasan_check_write+0x14/0x20 [ 598.634729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 598.639599] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.644798] RIP: 0033:0x457679 [ 598.648004] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.666916] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.674643] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 598.681922] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 598.689201] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 598.696480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 598.703771] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000017 00:33:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1a1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000040)=0x101, 0x1) 00:33:47 executing program 5 (fault-call:4 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3201, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='aio\x00', 0x40000, &(0x7f0000000140)=')system\x00') chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000001c0)=0x3, 0xfffffffffffffc6b) 00:33:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x20d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 598.976449] Unknown ioctl -1072143335 [ 599.000662] Unknown ioctl -1072143335 [ 599.057702] FAULT_INJECTION: forcing a failure. [ 599.057702] name failslab, interval 1, probability 0, space 0, times 0 [ 599.068958] CPU: 0 PID: 1332 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 599.076154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.085517] Call Trace: [ 599.088120] dump_stack+0x1c4/0x2b4 [ 599.091772] ? dump_stack_print_info.cold.2+0x52/0x52 [ 599.096983] ? mark_held_locks+0x130/0x130 [ 599.101235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.106791] ? check_preemption_disabled+0x48/0x200 [ 599.111830] should_fail.cold.4+0xa/0x17 [ 599.115914] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 599.121048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 599.126613] ? pcpu_balance_workfn+0x1740/0x1740 [ 599.131387] ? graph_lock+0x170/0x170 [ 599.135207] ? check_preemption_disabled+0x48/0x200 [ 599.140238] ? check_preemption_disabled+0x48/0x200 [ 599.145277] ? lock_acquire+0x1ed/0x520 [ 599.149269] __should_failslab+0x124/0x180 [ 599.153530] should_failslab+0x9/0x14 [ 599.157345] kmem_cache_alloc_node_trace+0x5a/0x740 [ 599.162378] ? blkcg_activate_policy+0x12c/0x580 [ 599.167152] ? trace_hardirqs_on+0x310/0x310 [ 599.171579] iolatency_pd_alloc+0x75/0x130 [ 599.175826] ? iolatency_set_limit+0x620/0x620 [ 599.180428] blkcg_activate_policy+0x221/0x580 [ 599.185039] blk_iolatency_init+0x130/0x2d0 [ 599.189385] blkcg_init_queue+0x1e3/0x560 [ 599.193553] blk_alloc_queue_node+0x949/0xe90 [ 599.198065] ? blk_init_allocated_queue+0x640/0x640 [ 599.203098] ? __mutex_init+0x1f7/0x290 [ 599.207110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.212661] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 599.217444] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 599.222656] blk_mq_init_queue+0x4b/0xb0 [ 599.226739] loop_add+0x34c/0xa30 [ 599.230217] ? loop_queue_rq+0x690/0x690 [ 599.234305] loop_control_ioctl+0x199/0x530 [ 599.238639] ? loop_add+0xa30/0xa30 [ 599.242278] ? arch_local_save_flags+0x40/0x40 [ 599.246881] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 599.251832] ? loop_add+0xa30/0xa30 [ 599.255475] do_vfs_ioctl+0x1de/0x1720 [ 599.259392] ? ioctl_preallocate+0x300/0x300 [ 599.263817] ? selinux_file_mprotect+0x620/0x620 [ 599.268589] ? __sb_end_write+0xd9/0x110 [ 599.272672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 599.278217] ? fput+0x130/0x1a0 [ 599.281517] ? do_syscall_64+0x9a/0x820 [ 599.285524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.291080] ? security_file_ioctl+0x94/0xc0 [ 599.295522] ksys_ioctl+0xa9/0xd0 [ 599.298993] __x64_sys_ioctl+0x73/0xb0 [ 599.302898] do_syscall_64+0x1b9/0x820 [ 599.306800] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 599.312179] ? syscall_return_slowpath+0x5e0/0x5e0 [ 599.317123] ? trace_hardirqs_on_caller+0x310/0x310 [ 599.322157] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 599.327191] ? recalc_sigpending_tsk+0x180/0x180 [ 599.331958] ? kasan_check_write+0x14/0x20 [ 599.336220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.341088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 599.346287] RIP: 0033:0x457679 [ 599.349504] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 599.368418] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.376141] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 599.383429] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 599.390707] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 599.397992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 599.405274] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000018 00:33:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x133, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:47 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) finit_module(r1, &(0x7f00000001c0)='vlan0\x00', 0x2) setsockopt$bt_BT_POWER(r2, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x600}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:33:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x37, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:47 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 00:33:47 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:47 executing program 5 (fault-call:4 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x11b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x8, &(0x7f0000000040), 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x8, r1, 0xa}) getsockname(r0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x80) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x12714, 0x1, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) [ 599.808185] FAULT_INJECTION: forcing a failure. [ 599.808185] name failslab, interval 1, probability 0, space 0, times 0 00:33:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r1 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000000)={0x0, {0x0, 0x989680}, 0x100000001, 0x8}) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f00000000c0)=0x80000000000100, 0xffffffffffffffea) sendto$inet(r1, &(0x7f0000000040)="2b7dc6036dff79f001117ffb10d2316229bc1e541db74bd0741a71c2034faccf3d15d33c4c43f6d9826a1d357362f1db31248e6b09813e31014eef94cf302a141045a9e87e8bcb9b06b0c7a96e244826e35ce602485057fd0d04225868b923", 0x5f, 0x4000000, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) 00:33:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4a00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 599.861275] CPU: 0 PID: 1362 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 599.868505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.877868] Call Trace: [ 599.880473] dump_stack+0x1c4/0x2b4 [ 599.884134] ? dump_stack_print_info.cold.2+0x52/0x52 [ 599.889348] ? trace_hardirqs_on+0xbd/0x310 [ 599.893679] ? kasan_check_read+0x11/0x20 [ 599.897849] ? __debug_object_init+0x57d/0x1290 [ 599.902539] should_fail.cold.4+0xa/0x17 [ 599.906610] ? kasan_check_write+0x14/0x20 00:33:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc7, 0x6c00) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4282, 0x9, 0x7fffffff, 0x400, 0x7f}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xbf1c, 0x40}, 0x90) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000080)=0x119) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 599.910868] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 599.915991] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 599.921115] ? graph_lock+0x170/0x170 [ 599.924933] ? graph_lock+0x170/0x170 [ 599.928740] ? debug_object_free+0x690/0x690 [ 599.933169] ? print_usage_bug+0xc0/0xc0 [ 599.937241] ? blkcg_init_queue+0x1e3/0x560 [ 599.941569] ? blk_alloc_queue_node+0x949/0xe90 [ 599.946251] ? blk_mq_init_queue+0x4b/0xb0 [ 599.950507] ? loop_add+0x34c/0xa30 [ 599.954144] ? loop_control_ioctl+0x199/0x530 00:33:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x159, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 599.958651] ? find_held_lock+0x36/0x1c0 [ 599.962725] ? __lock_is_held+0xb5/0x140 [ 599.966816] ? ___might_sleep+0x1ed/0x300 [ 599.970982] ? arch_local_save_flags+0x40/0x40 [ 599.975585] ? __lock_is_held+0xb5/0x140 [ 599.979674] __should_failslab+0x124/0x180 [ 599.983933] should_failslab+0x9/0x14 [ 599.987757] kmem_cache_alloc_node_trace+0x270/0x740 [ 599.992878] ? blkcg_iolatency_throttle+0x2130/0x2130 [ 599.998089] ? init_timer_on_stack_key+0xe0/0xe0 [ 600.002864] blk_throtl_init+0xca/0x630 [ 600.006853] ? blk_throtl_drain+0x810/0x810 00:33:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x1) 00:33:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, r3) fcntl$getflags(r2, 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@loopback}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@ipv4={[], [], @local}}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) [ 600.011188] ? blk_iolatency_init+0x1d0/0x2d0 [ 600.015702] blkcg_init_queue+0x205/0x560 [ 600.019870] blk_alloc_queue_node+0x949/0xe90 [ 600.024378] ? blk_init_allocated_queue+0x640/0x640 [ 600.029407] ? __mutex_init+0x1f7/0x290 [ 600.033418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.038972] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 600.043766] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 600.048975] blk_mq_init_queue+0x4b/0xb0 [ 600.053055] loop_add+0x34c/0xa30 [ 600.056540] ? loop_queue_rq+0x690/0x690 00:33:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000080)=0x4, 0x1) [ 600.060623] loop_control_ioctl+0x199/0x530 [ 600.064957] ? loop_add+0xa30/0xa30 [ 600.068627] ? arch_local_save_flags+0x40/0x40 [ 600.073229] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 600.078178] ? loop_add+0xa30/0xa30 [ 600.081821] do_vfs_ioctl+0x1de/0x1720 [ 600.085731] ? ioctl_preallocate+0x300/0x300 [ 600.090165] ? selinux_file_mprotect+0x620/0x620 [ 600.094938] ? __sb_end_write+0xd9/0x110 [ 600.099017] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 600.104570] ? fput+0x130/0x1a0 [ 600.107861] ? do_syscall_64+0x9a/0x820 [ 600.111852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.117401] ? security_file_ioctl+0x94/0xc0 [ 600.121825] ksys_ioctl+0xa9/0xd0 [ 600.125287] __x64_sys_ioctl+0x73/0xb0 [ 600.129166] do_syscall_64+0x1b9/0x820 [ 600.133044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 600.138407] ? syscall_return_slowpath+0x5e0/0x5e0 [ 600.143341] ? trace_hardirqs_on_caller+0x310/0x310 [ 600.148344] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 600.153393] ? recalc_sigpending_tsk+0x180/0x180 [ 600.158136] ? kasan_check_write+0x14/0x20 [ 600.162359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.167194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.172370] RIP: 0033:0x457679 [ 600.175549] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 600.194436] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.202136] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 600.209389] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 600.216642] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 600.223894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 600.231147] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000019 00:33:49 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:49 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0xc}}}}, 0x84) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000280)={0x7, 0x3, 0x7}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000fcdbdf2508"], 0x1}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000bfcffc), &(0x7f00000000c0)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x41, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:49 executing program 5 (fault-call:4 fault-nth:26): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x963, 0x0, 0x10001, 0x1000}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x10000, r2, 0x10001, 0x1}) 00:33:49 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb300, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x90080, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/245, 0x4}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000200)=0x5, 0x4) [ 601.124652] FAULT_INJECTION: forcing a failure. [ 601.124652] name failslab, interval 1, probability 0, space 0, times 0 [ 601.153888] CPU: 0 PID: 1428 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 601.161108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.170468] Call Trace: [ 601.173088] dump_stack+0x1c4/0x2b4 [ 601.176737] ? dump_stack_print_info.cold.2+0x52/0x52 [ 601.181957] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 601.187084] should_fail.cold.4+0xa/0x17 [ 601.191156] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 601.195754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 601.200873] ? graph_lock+0x170/0x170 [ 601.204686] ? __debug_object_init+0x57d/0x1290 [ 601.209371] ? find_held_lock+0x36/0x1c0 [ 601.213449] ? graph_lock+0x170/0x170 [ 601.217294] ? debug_object_free+0x690/0x690 [ 601.221714] ? mark_held_locks+0xc7/0x130 [ 601.225880] ? find_held_lock+0x36/0x1c0 [ 601.229948] ? __lock_is_held+0xb5/0x140 [ 601.234023] ? ___might_sleep+0x1ed/0x300 [ 601.238175] ? arch_local_save_flags+0x40/0x40 [ 601.242778] __should_failslab+0x124/0x180 [ 601.247021] should_failslab+0x9/0x14 [ 601.250828] kmem_cache_alloc_node_trace+0x270/0x740 [ 601.255942] ? _raw_spin_unlock_irq+0x27/0x80 [ 601.260440] ? _raw_spin_unlock_irq+0x27/0x80 [ 601.264946] throtl_pd_alloc+0xdd/0x980 [ 601.268929] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 601.274210] ? __lock_is_held+0xb5/0x140 [ 601.278287] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 601.283831] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 601.289113] blkcg_activate_policy+0xf4/0x580 [ 601.293625] blk_throtl_init+0x3d3/0x630 [ 601.297690] ? blk_throtl_drain+0x810/0x810 [ 601.302018] ? blk_iolatency_init+0x1d0/0x2d0 [ 601.306533] blkcg_init_queue+0x205/0x560 [ 601.310687] blk_alloc_queue_node+0x949/0xe90 [ 601.315191] ? blk_init_allocated_queue+0x640/0x640 [ 601.320211] ? __mutex_init+0x1f7/0x290 [ 601.324209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.329756] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 601.334541] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 601.339751] blk_mq_init_queue+0x4b/0xb0 [ 601.343820] loop_add+0x34c/0xa30 [ 601.347280] ? loop_queue_rq+0x690/0x690 [ 601.351360] loop_control_ioctl+0x199/0x530 [ 601.355685] ? loop_add+0xa30/0xa30 [ 601.359323] ? arch_local_save_flags+0x40/0x40 [ 601.363916] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 601.368856] ? loop_add+0xa30/0xa30 [ 601.372495] do_vfs_ioctl+0x1de/0x1720 [ 601.376397] ? ioctl_preallocate+0x300/0x300 [ 601.380817] ? selinux_file_mprotect+0x620/0x620 [ 601.385582] ? __sb_end_write+0xd9/0x110 [ 601.389653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.395196] ? fput+0x130/0x1a0 [ 601.398480] ? do_syscall_64+0x9a/0x820 [ 601.402468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.408034] ? security_file_ioctl+0x94/0xc0 [ 601.412453] ksys_ioctl+0xa9/0xd0 [ 601.415922] __x64_sys_ioctl+0x73/0xb0 [ 601.419817] do_syscall_64+0x1b9/0x820 [ 601.423715] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 601.429092] ? syscall_return_slowpath+0x5e0/0x5e0 [ 601.434028] ? trace_hardirqs_on_caller+0x310/0x310 [ 601.439050] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 601.444072] ? recalc_sigpending_tsk+0x180/0x180 [ 601.448833] ? kasan_check_write+0x14/0x20 [ 601.453079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.458019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.463207] RIP: 0033:0x457679 [ 601.466407] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.485397] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.493112] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 601.500379] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 601.507647] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 601.514919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:33:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x256, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 601.522187] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001a 00:33:49 executing program 5 (fault-call:4 fault-nth:27): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:49 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc300000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x35, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 601.710333] FAULT_INJECTION: forcing a failure. [ 601.710333] name failslab, interval 1, probability 0, space 0, times 0 [ 601.721589] CPU: 1 PID: 1451 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 601.728785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.738145] Call Trace: [ 601.740757] dump_stack+0x1c4/0x2b4 [ 601.744404] ? dump_stack_print_info.cold.2+0x52/0x52 [ 601.749611] ? debug_object_free+0x690/0x690 [ 601.754032] ? __kernel_text_address+0xd/0x40 [ 601.758541] ? unwind_get_return_address+0x61/0xa0 [ 601.763505] should_fail.cold.4+0xa/0x17 [ 601.767586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 601.772703] ? graph_lock+0x170/0x170 [ 601.776531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.782077] ? check_preemption_disabled+0x48/0x200 [ 601.787103] ? check_preemption_disabled+0x48/0x200 [ 601.792138] ? __lock_is_held+0xb5/0x140 [ 601.796211] ? __lockdep_init_map+0x105/0x590 [ 601.800724] ? lockdep_init_map+0x9/0x10 [ 601.804791] ? init_timer_key+0x1a5/0x480 [ 601.808950] ? init_timer_on_stack_key+0xe0/0xe0 [ 601.813722] ? __lock_is_held+0xb5/0x140 [ 601.817797] __should_failslab+0x124/0x180 [ 601.822042] should_failslab+0x9/0x14 [ 601.825851] kmem_cache_alloc_node_trace+0x5a/0x740 [ 601.830905] ? lock_acquire+0x1ed/0x520 [ 601.834887] ? blkcg_activate_policy+0x12c/0x580 [ 601.839648] throtl_pd_alloc+0xdd/0x980 [ 601.843626] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 601.848909] ? blkcg_activate_policy+0x12c/0x580 [ 601.853670] ? trace_hardirqs_on+0x310/0x310 [ 601.858083] ? kasan_check_write+0x14/0x20 [ 601.862328] ? do_raw_spin_lock+0xc1/0x200 [ 601.866574] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 601.871860] blkcg_activate_policy+0x221/0x580 [ 601.876459] blk_throtl_init+0x3d3/0x630 [ 601.880533] ? blk_throtl_drain+0x810/0x810 [ 601.884860] ? blk_iolatency_init+0x1d0/0x2d0 [ 601.889365] blkcg_init_queue+0x205/0x560 [ 601.893529] blk_alloc_queue_node+0x949/0xe90 [ 601.898035] ? blk_init_allocated_queue+0x640/0x640 [ 601.903059] ? __mutex_init+0x1f7/0x290 [ 601.907058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.912604] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 601.917377] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 601.922580] blk_mq_init_queue+0x4b/0xb0 [ 601.926908] loop_add+0x34c/0xa30 [ 601.930375] ? loop_queue_rq+0x690/0x690 [ 601.934541] loop_control_ioctl+0x199/0x530 [ 601.938872] ? loop_add+0xa30/0xa30 [ 601.942514] ? arch_local_save_flags+0x40/0x40 [ 601.947108] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 601.952098] ? loop_add+0xa30/0xa30 [ 601.955734] do_vfs_ioctl+0x1de/0x1720 [ 601.959632] ? ioctl_preallocate+0x300/0x300 [ 601.964054] ? selinux_file_mprotect+0x620/0x620 [ 601.968821] ? __sb_end_write+0xd9/0x110 [ 601.972892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.978428] ? fput+0x130/0x1a0 [ 601.981714] ? do_syscall_64+0x9a/0x820 [ 601.985694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.991236] ? security_file_ioctl+0x94/0xc0 [ 601.995657] ksys_ioctl+0xa9/0xd0 [ 601.999116] __x64_sys_ioctl+0x73/0xb0 [ 602.003012] do_syscall_64+0x1b9/0x820 [ 602.006901] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 602.012275] ? syscall_return_slowpath+0x5e0/0x5e0 [ 602.017212] ? trace_hardirqs_on_caller+0x310/0x310 [ 602.022236] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 602.027269] ? recalc_sigpending_tsk+0x180/0x180 [ 602.032031] ? kasan_check_write+0x14/0x20 [ 602.036280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.041138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.046327] RIP: 0033:0x457679 [ 602.049526] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.068431] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.076144] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 602.083416] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 602.090769] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 602.098039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:33:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2000) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x70, r1, 0x180000000) [ 602.105306] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001b 00:33:50 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000180)=""/247) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0xe}}, @in6={0xa, 0x4e24, 0x16, @remote, 0x1}, @in6={0xa, 0x4e20, 0x6, @empty, 0xffff}, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x3ff}, @in6={0xa, 0x4e21, 0x5, @ipv4, 0x8}], 0xb8) 00:33:50 executing program 5 (fault-call:4 fault-nth:28): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:50 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa8, "693a24b16a31c9cc9facb0766e9b0f23dfcd35b8ca9f4e3c4aacb02d2e505913df6e897307ea21a67e829f438439a3a003c568aa7d954e64715d4bd76a545314adbc65f7e5008b59153b9e7b075589504e66607a45bc257f9891ec3db252bd948541aa3323e5a000f22bb156153531e99068ca69163038211445df0563bd5bac34cd4fac337deeefbdba784e2d228343492fd7e1e08f86c1eab19eed091f18784f96dbb98c98218b"}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x7}}, 0x5, 0x8a72}, &(0x7f0000000240)=0x90) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x400, 0x1) 00:33:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xdf01, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 602.513157] FAULT_INJECTION: forcing a failure. [ 602.513157] name failslab, interval 1, probability 0, space 0, times 0 [ 602.539652] CPU: 1 PID: 1484 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 602.546884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.554457] QAT: Invalid ioctl [ 602.556239] Call Trace: 00:33:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b6, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 602.556274] dump_stack+0x1c4/0x2b4 [ 602.556297] ? dump_stack_print_info.cold.2+0x52/0x52 [ 602.570880] ? save_stack+0xa9/0xd0 [ 602.574536] should_fail.cold.4+0xa/0x17 [ 602.577115] QAT: Invalid ioctl [ 602.578605] ? print_usage_bug+0xc0/0xc0 [ 602.578628] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 602.578643] ? ksys_ioctl+0xa9/0xd0 [ 602.578662] ? __x64_sys_ioctl+0x73/0xb0 [ 602.598670] ? do_syscall_64+0x1b9/0x820 [ 602.602748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.608128] ? do_raw_spin_unlock+0xa7/0x2f0 [ 602.612553] ? graph_lock+0x170/0x170 [ 602.616375] ? kasan_check_write+0x14/0x20 [ 602.620623] ? graph_lock+0x170/0x170 [ 602.624445] ? mark_held_locks+0xc7/0x130 [ 602.628616] ? find_held_lock+0x36/0x1c0 [ 602.632694] ? __lock_is_held+0xb5/0x140 [ 602.636778] ? ___might_sleep+0x1ed/0x300 [ 602.640944] ? arch_local_save_flags+0x40/0x40 [ 602.645545] ? blkcg_activate_policy+0x3db/0x580 [ 602.650319] __should_failslab+0x124/0x180 [ 602.654573] should_failslab+0x9/0x14 [ 602.658384] kmem_cache_alloc_trace+0x2d7/0x750 [ 602.663064] ? blk_throtl_init+0x3e7/0x630 [ 602.667312] ? blk_throtl_drain+0x810/0x810 [ 602.671649] ? blk_mq_can_queue+0x50/0x50 [ 602.675807] ? plug_ctx_cmp+0x110/0x110 [ 602.679792] blk_stat_alloc_callback+0x5b/0x280 [ 602.684481] blk_mq_init_allocated_queue+0x12c/0x1680 [ 602.689693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.695244] ? blk_alloc_queue_node+0x95f/0xe90 [ 602.699933] ? blk_mq_map_swqueue+0xa70/0xa70 [ 602.704437] ? __mutex_init+0x1f7/0x290 [ 602.708448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.714004] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 602.718789] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 602.724003] blk_mq_init_queue+0x63/0xb0 [ 602.728080] loop_add+0x34c/0xa30 [ 602.731547] ? loop_queue_rq+0x690/0x690 [ 602.735635] loop_control_ioctl+0x199/0x530 [ 602.739969] ? loop_add+0xa30/0xa30 [ 602.743606] ? arch_local_save_flags+0x40/0x40 [ 602.748208] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 602.753161] ? loop_add+0xa30/0xa30 [ 602.756802] do_vfs_ioctl+0x1de/0x1720 [ 602.760711] ? ioctl_preallocate+0x300/0x300 [ 602.765140] ? selinux_file_mprotect+0x620/0x620 [ 602.769914] ? __sb_end_write+0xd9/0x110 [ 602.773987] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 602.779531] ? fput+0x130/0x1a0 [ 602.782822] ? do_syscall_64+0x9a/0x820 [ 602.786811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.792360] ? security_file_ioctl+0x94/0xc0 [ 602.796784] ksys_ioctl+0xa9/0xd0 [ 602.800259] __x64_sys_ioctl+0x73/0xb0 [ 602.804162] do_syscall_64+0x1b9/0x820 [ 602.808060] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 602.813447] ? syscall_return_slowpath+0x5e0/0x5e0 [ 602.818401] ? trace_hardirqs_on_caller+0x310/0x310 [ 602.823437] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 602.828468] ? recalc_sigpending_tsk+0x180/0x180 [ 602.833239] ? kasan_check_write+0x14/0x20 [ 602.837507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.842373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.847568] RIP: 0033:0x457679 00:33:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2c00000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x204, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x8, &(0x7f0000000000)=0x8000000101, 0x1) [ 602.850772] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.869687] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.877409] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 602.884708] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 602.891965] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 602.899218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 602.906472] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001c 00:33:51 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:51 executing program 5 (fault-call:4 fault-nth:29): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6400000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, {0xfffffffffffffe7b, 0x4, 0xfbc, 0x7, 0x3, 0xf3f000000}, 0x2, 0x100000001}, 0xe) [ 603.071004] FAULT_INJECTION: forcing a failure. [ 603.071004] name failslab, interval 1, probability 0, space 0, times 0 [ 603.100110] CPU: 1 PID: 1508 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 603.107354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.116719] Call Trace: [ 603.119325] dump_stack+0x1c4/0x2b4 [ 603.122974] ? dump_stack_print_info.cold.2+0x52/0x52 [ 603.128180] ? __kernel_text_address+0xd/0x40 [ 603.132708] should_fail.cold.4+0xa/0x17 [ 603.136788] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 603.141914] ? graph_lock+0x170/0x170 [ 603.145720] ? save_stack+0x43/0xd0 [ 603.149356] ? kasan_kmalloc+0xc7/0xe0 [ 603.153259] ? kmem_cache_alloc_trace+0x152/0x750 [ 603.158115] ? blk_stat_alloc_callback+0x5b/0x280 [ 603.162970] ? graph_lock+0x170/0x170 [ 603.166781] ? loop_control_ioctl+0x199/0x530 [ 603.171287] ? do_vfs_ioctl+0x1de/0x1720 [ 603.175353] ? ksys_ioctl+0xa9/0xd0 [ 603.178986] ? __x64_sys_ioctl+0x73/0xb0 [ 603.183061] ? do_syscall_64+0x1b9/0x820 [ 603.187130] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.192512] ? mark_held_locks+0xc7/0x130 [ 603.196673] ? find_held_lock+0x36/0x1c0 [ 603.200749] ? __lock_is_held+0xb5/0x140 [ 603.204836] ? ___might_sleep+0x1ed/0x300 [ 603.208996] ? arch_local_save_flags+0x40/0x40 [ 603.213599] __should_failslab+0x124/0x180 [ 603.217849] should_failslab+0x9/0x14 00:33:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1cf, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 603.221660] __kmalloc+0x2d4/0x760 [ 603.225211] ? kmem_cache_alloc_trace+0x353/0x750 [ 603.230068] ? blk_throtl_init+0x3e7/0x630 [ 603.234318] ? blk_stat_alloc_callback+0x84/0x280 [ 603.239176] ? blk_mq_can_queue+0x50/0x50 [ 603.243336] ? plug_ctx_cmp+0x110/0x110 [ 603.247323] blk_stat_alloc_callback+0x84/0x280 [ 603.252017] blk_mq_init_allocated_queue+0x12c/0x1680 [ 603.257218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.262770] ? blk_alloc_queue_node+0x95f/0xe90 [ 603.267459] ? blk_mq_map_swqueue+0xa70/0xa70 [ 603.271976] ? __mutex_init+0x1f7/0x290 [ 603.275982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.281531] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 603.286325] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 603.291534] blk_mq_init_queue+0x63/0xb0 [ 603.295609] loop_add+0x34c/0xa30 [ 603.299082] ? loop_queue_rq+0x690/0x690 [ 603.303167] loop_control_ioctl+0x199/0x530 [ 603.307510] ? loop_add+0xa30/0xa30 [ 603.311152] ? arch_local_save_flags+0x40/0x40 [ 603.315758] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 603.320708] ? loop_add+0xa30/0xa30 [ 603.324351] do_vfs_ioctl+0x1de/0x1720 [ 603.328265] ? ioctl_preallocate+0x300/0x300 [ 603.332693] ? selinux_file_mprotect+0x620/0x620 [ 603.337462] ? __sb_end_write+0xd9/0x110 [ 603.341547] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 603.347093] ? fput+0x130/0x1a0 [ 603.350382] ? do_syscall_64+0x9a/0x820 [ 603.354376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.359922] ? security_file_ioctl+0x94/0xc0 [ 603.364345] ksys_ioctl+0xa9/0xd0 [ 603.367818] __x64_sys_ioctl+0x73/0xb0 [ 603.371720] do_syscall_64+0x1b9/0x820 [ 603.375620] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 603.380995] ? syscall_return_slowpath+0x5e0/0x5e0 [ 603.385936] ? trace_hardirqs_on_caller+0x310/0x310 [ 603.390966] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 603.395988] ? recalc_sigpending_tsk+0x180/0x180 [ 603.401276] ? kasan_check_write+0x14/0x20 [ 603.405539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.410403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.415599] RIP: 0033:0x457679 [ 603.418803] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.437715] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.445438] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 603.452714] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 603.452724] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 00:33:51 executing program 5 (fault-call:4 fault-nth:30): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 603.452734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 603.452743] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001d 00:33:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6a00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 603.606621] FAULT_INJECTION: forcing a failure. [ 603.606621] name failslab, interval 1, probability 0, space 0, times 0 [ 603.625216] CPU: 1 PID: 1525 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 603.632465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.641845] Call Trace: [ 603.644451] dump_stack+0x1c4/0x2b4 [ 603.648118] ? dump_stack_print_info.cold.2+0x52/0x52 [ 603.653334] ? graph_lock+0x170/0x170 [ 603.657164] should_fail.cold.4+0xa/0x17 [ 603.661242] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 603.666370] ? __lock_is_held+0xb5/0x140 [ 603.670446] ? graph_lock+0x170/0x170 [ 603.674275] ? graph_lock+0x170/0x170 [ 603.678097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 603.683649] ? pcpu_alloc+0x190/0x15e0 [ 603.687556] ? find_held_lock+0x36/0x1c0 [ 603.691637] ? __lock_is_held+0xb5/0x140 [ 603.695726] ? ___might_sleep+0x1ed/0x300 [ 603.699882] ? __lockdep_init_map+0x105/0x590 [ 603.704393] ? arch_local_save_flags+0x40/0x40 [ 603.708997] ? kobject_init+0x23d/0x2f0 [ 603.713116] __should_failslab+0x124/0x180 [ 603.717377] should_failslab+0x9/0x14 [ 603.721199] kmem_cache_alloc_node_trace+0x270/0x740 [ 603.726318] ? find_next_bit+0x104/0x130 [ 603.730404] __kmalloc_node+0x33/0x70 [ 603.734226] blk_mq_init_allocated_queue+0x227/0x1680 [ 603.739441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.744989] ? blk_alloc_queue_node+0x95f/0xe90 [ 603.749677] ? blk_mq_map_swqueue+0xa70/0xa70 [ 603.754185] ? __mutex_init+0x1f7/0x290 [ 603.758192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.763747] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 603.768539] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 603.773750] blk_mq_init_queue+0x63/0xb0 [ 603.777833] loop_add+0x34c/0xa30 [ 603.781309] ? loop_queue_rq+0x690/0x690 [ 603.785398] loop_control_ioctl+0x199/0x530 [ 603.789738] ? loop_add+0xa30/0xa30 [ 603.793385] ? arch_local_save_flags+0x40/0x40 [ 603.797988] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 603.802937] ? loop_add+0xa30/0xa30 00:33:52 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 603.806581] do_vfs_ioctl+0x1de/0x1720 [ 603.810500] ? ioctl_preallocate+0x300/0x300 [ 603.814924] ? selinux_file_mprotect+0x620/0x620 [ 603.819699] ? __sb_end_write+0xd9/0x110 [ 603.823776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 603.829321] ? fput+0x130/0x1a0 [ 603.832613] ? do_syscall_64+0x9a/0x820 [ 603.836613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.842162] ? security_file_ioctl+0x94/0xc0 [ 603.846589] ksys_ioctl+0xa9/0xd0 [ 603.850055] __x64_sys_ioctl+0x73/0xb0 [ 603.853961] do_syscall_64+0x1b9/0x820 [ 603.857855] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 603.863229] ? syscall_return_slowpath+0x5e0/0x5e0 [ 603.863258] ? trace_hardirqs_on_caller+0x310/0x310 [ 603.863274] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 603.863290] ? recalc_sigpending_tsk+0x180/0x180 [ 603.863306] ? kasan_check_write+0x14/0x20 [ 603.863327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.863350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.863363] RIP: 0033:0x457679 [ 603.863381] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.919427] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.927155] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 603.934450] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 603.941738] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 603.949019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:33:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x98800, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x25f, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) [ 603.956728] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001e 00:33:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x20, &(0x7f0000000080)=0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:52 executing program 5 (fault-call:4 fault-nth:31): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xdc010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 604.133241] FAULT_INJECTION: forcing a failure. [ 604.133241] name failslab, interval 1, probability 0, space 0, times 0 [ 604.159363] CPU: 0 PID: 1552 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 604.166588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.175942] Call Trace: [ 604.178541] dump_stack+0x1c4/0x2b4 [ 604.182185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 604.187404] should_fail.cold.4+0xa/0x17 [ 604.191482] ? blk_mq_realloc_hw_ctxs+0x10d/0x1360 [ 604.196442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 604.201557] ? mutex_trylock+0x2b0/0x2b0 [ 604.205635] ? graph_lock+0x170/0x170 [ 604.209451] ? blk_mq_sysfs_unregister+0x1af/0x210 [ 604.214405] ? lock_downgrade+0x900/0x900 [ 604.218567] ? graph_lock+0x170/0x170 [ 604.222379] ? is_bpf_text_address+0xac/0x170 [ 604.226888] ? lock_downgrade+0x900/0x900 [ 604.231046] ? check_preemption_disabled+0x48/0x200 [ 604.236079] ? find_held_lock+0x36/0x1c0 [ 604.240158] ? __lock_is_held+0xb5/0x140 [ 604.244244] ? ___might_sleep+0x1ed/0x300 [ 604.248403] ? kernel_text_address+0x79/0xf0 [ 604.252827] ? arch_local_save_flags+0x40/0x40 [ 604.257420] ? __kernel_text_address+0xd/0x40 [ 604.261927] ? unwind_get_return_address+0x61/0xa0 [ 604.266873] ? __save_stack_trace+0x8d/0xf0 [ 604.271432] __should_failslab+0x124/0x180 [ 604.275691] should_failslab+0x9/0x14 [ 604.279520] kmem_cache_alloc_node_trace+0x270/0x740 [ 604.284639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 604.290189] ? find_next_bit+0x104/0x130 [ 604.294273] __kmalloc_node+0x33/0x70 [ 604.298090] blk_mq_realloc_hw_ctxs+0x2c1/0x1360 [ 604.302861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.308408] ? check_preemption_disabled+0x48/0x200 [ 604.313443] ? blk_mq_free_map_and_requests+0x160/0x160 [ 604.318823] ? __lock_is_held+0xb5/0x140 [ 604.322903] ? __kmalloc_node+0x33/0x70 [ 604.326884] ? __kmalloc_node+0x33/0x70 [ 604.330874] ? rcu_read_lock_sched_held+0x108/0x120 [ 604.335904] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 604.341188] ? kasan_unpoison_shadow+0x35/0x50 [ 604.345782] ? kasan_kmalloc+0xc7/0xe0 [ 604.349689] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 604.354890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.360439] ? blk_alloc_queue_node+0x95f/0xe90 [ 604.365122] ? blk_mq_map_swqueue+0xa70/0xa70 [ 604.369628] ? __mutex_init+0x1f7/0x290 [ 604.373642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.379188] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 604.383968] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 604.389176] blk_mq_init_queue+0x63/0xb0 [ 604.393252] loop_add+0x34c/0xa30 [ 604.396719] ? loop_queue_rq+0x690/0x690 [ 604.400991] loop_control_ioctl+0x199/0x530 [ 604.405328] ? loop_add+0xa30/0xa30 [ 604.408970] ? arch_local_save_flags+0x40/0x40 [ 604.413572] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 604.418523] ? loop_add+0xa30/0xa30 [ 604.422166] do_vfs_ioctl+0x1de/0x1720 [ 604.426070] ? ioctl_preallocate+0x300/0x300 [ 604.430506] ? selinux_file_mprotect+0x620/0x620 [ 604.435278] ? __sb_end_write+0xd9/0x110 [ 604.439353] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 604.444895] ? fput+0x130/0x1a0 [ 604.448190] ? do_syscall_64+0x9a/0x820 [ 604.452182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.457728] ? security_file_ioctl+0x94/0xc0 [ 604.462159] ksys_ioctl+0xa9/0xd0 [ 604.465734] __x64_sys_ioctl+0x73/0xb0 [ 604.469646] do_syscall_64+0x1b9/0x820 [ 604.473541] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 604.478914] ? syscall_return_slowpath+0x5e0/0x5e0 [ 604.483855] ? trace_hardirqs_on_caller+0x310/0x310 [ 604.488886] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 604.494000] ? recalc_sigpending_tsk+0x180/0x180 [ 604.498772] ? kasan_check_write+0x14/0x20 [ 604.503023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 604.507880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.513075] RIP: 0033:0x457679 [ 604.516274] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:33:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fchdir(r0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x3e2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000003701000207000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="0f00767b6eff07304ae88ca8776c616e31"], 0x2d) mq_open(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x4, &(0x7f0000000140)={0x5, 0x7, 0xfff, 0x3, 0x4, 0xc0000, 0xff, 0x101}) 00:33:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x34, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:52 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) exit(0x8) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 604.535179] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.542903] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 604.550182] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 604.557462] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 604.564755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 604.572030] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000001f 00:33:52 executing program 5 (fault-call:4 fault-nth:32): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3400, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 604.740123] FAULT_INJECTION: forcing a failure. [ 604.740123] name failslab, interval 1, probability 0, space 0, times 0 [ 604.757599] CPU: 1 PID: 1576 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 604.764806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.774165] Call Trace: [ 604.776769] dump_stack+0x1c4/0x2b4 [ 604.780425] ? dump_stack_print_info.cold.2+0x52/0x52 [ 604.785637] ? find_held_lock+0x36/0x1c0 [ 604.789724] should_fail.cold.4+0xa/0x17 [ 604.793805] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 604.798925] ? trace_hardirqs_on+0xbd/0x310 [ 604.803266] ? kasan_check_read+0x11/0x20 [ 604.807425] ? __debug_object_init+0x57d/0x1290 [ 604.812109] ? graph_lock+0x170/0x170 [ 604.815929] ? kasan_check_write+0x14/0x20 [ 604.820176] ? graph_lock+0x170/0x170 [ 604.823993] ? kasan_check_write+0x14/0x20 [ 604.828244] ? find_held_lock+0x36/0x1c0 [ 604.832328] ? __lock_is_held+0xb5/0x140 [ 604.836411] ? ___might_sleep+0x1ed/0x300 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x1) [ 604.840574] ? arch_local_save_flags+0x40/0x40 [ 604.845183] __should_failslab+0x124/0x180 [ 604.849436] should_failslab+0x9/0x14 [ 604.853260] kmem_cache_alloc_node_trace+0x270/0x740 [ 604.858381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.863930] ? check_preemption_disabled+0x48/0x200 [ 604.868970] __kmalloc_node+0x33/0x70 [ 604.872790] blk_mq_realloc_hw_ctxs+0x6fe/0x1360 [ 604.877576] ? blk_mq_free_map_and_requests+0x160/0x160 [ 604.882955] ? __lock_is_held+0xb5/0x140 [ 604.887036] ? __kmalloc_node+0x33/0x70 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x101, 0x1) [ 604.891022] ? __kmalloc_node+0x33/0x70 [ 604.895007] ? rcu_read_lock_sched_held+0x108/0x120 [ 604.900040] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 604.905329] ? kasan_unpoison_shadow+0x35/0x50 [ 604.909920] ? kasan_kmalloc+0xc7/0xe0 [ 604.913832] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 604.919035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.924588] ? blk_alloc_queue_node+0x95f/0xe90 [ 604.929281] ? blk_mq_map_swqueue+0xa70/0xa70 [ 604.933794] ? __mutex_init+0x1f7/0x290 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x40, 0x9, 0x9, 0x1, 0xffffffffffffff64}) fchdir(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) init_module(&(0x7f0000000080)='wlan0GPL\x00', 0x9, &(0x7f00000000c0)='\x00') setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:33:53 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 604.937808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.943354] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 604.948142] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 604.953359] blk_mq_init_queue+0x63/0xb0 [ 604.957437] loop_add+0x34c/0xa30 [ 604.960910] ? loop_queue_rq+0x690/0x690 [ 604.964998] loop_control_ioctl+0x199/0x530 [ 604.969334] ? loop_add+0xa30/0xa30 [ 604.972976] ? arch_local_save_flags+0x40/0x40 [ 604.977578] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 604.982536] ? loop_add+0xa30/0xa30 [ 604.986184] do_vfs_ioctl+0x1de/0x1720 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="05000000070000331a0000"]}) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xff, 0x40002) [ 604.990095] ? ioctl_preallocate+0x300/0x300 [ 604.994533] ? selinux_file_mprotect+0x620/0x620 [ 604.999313] ? __sb_end_write+0xd9/0x110 [ 605.003392] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.008942] ? fput+0x130/0x1a0 [ 605.012239] ? do_syscall_64+0x9a/0x820 [ 605.016236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.021792] ? security_file_ioctl+0x94/0xc0 [ 605.026219] ksys_ioctl+0xa9/0xd0 [ 605.029698] __x64_sys_ioctl+0x73/0xb0 [ 605.033603] do_syscall_64+0x1b9/0x820 [ 605.037519] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 605.042897] ? syscall_return_slowpath+0x5e0/0x5e0 [ 605.047847] ? trace_hardirqs_on_caller+0x310/0x310 [ 605.052881] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 605.057916] ? recalc_sigpending_tsk+0x180/0x180 [ 605.062690] ? kasan_check_write+0x14/0x20 [ 605.066949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.071816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.077018] RIP: 0033:0x457679 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x240400, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/50) [ 605.080222] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.099141] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.106861] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 605.114142] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 605.121417] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 605.128698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 605.135976] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000020 00:33:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x18d, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:53 executing program 5 (fault-call:4 fault-nth:33): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 605.252966] FAULT_INJECTION: forcing a failure. [ 605.252966] name failslab, interval 1, probability 0, space 0, times 0 [ 605.268773] CPU: 0 PID: 1612 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 605.275983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.285340] Call Trace: [ 605.287942] dump_stack+0x1c4/0x2b4 [ 605.291590] ? dump_stack_print_info.cold.2+0x52/0x52 [ 605.296797] ? rcu_bh_qs+0xc0/0xc0 [ 605.300363] should_fail.cold.4+0xa/0x17 [ 605.304440] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 605.309557] ? kernel_text_address+0x79/0xf0 [ 605.313975] ? __kernel_text_address+0xd/0x40 [ 605.318523] ? graph_lock+0x170/0x170 [ 605.322341] ? __save_stack_trace+0x8d/0xf0 [ 605.326679] ? graph_lock+0x170/0x170 [ 605.330516] ? find_held_lock+0x36/0x1c0 [ 605.334596] ? __lock_is_held+0xb5/0x140 [ 605.338685] ? ___might_sleep+0x1ed/0x300 [ 605.342849] ? arch_local_save_flags+0x40/0x40 [ 605.347464] __should_failslab+0x124/0x180 [ 605.351730] should_failslab+0x9/0x14 [ 605.355544] kmem_cache_alloc_node_trace+0x270/0x740 [ 605.360650] ? __kmalloc_node+0x33/0x70 [ 605.364627] ? __kmalloc_node+0x33/0x70 [ 605.368607] ? rcu_read_lock_sched_held+0x108/0x120 [ 605.373632] __kmalloc_node+0x33/0x70 [ 605.377442] sbitmap_init_node+0x288/0x440 [ 605.381691] blk_mq_realloc_hw_ctxs+0x777/0x1360 [ 605.386461] ? blk_mq_free_map_and_requests+0x160/0x160 [ 605.391926] ? __lock_is_held+0xb5/0x140 [ 605.395998] ? __kmalloc_node+0x33/0x70 [ 605.399977] ? __kmalloc_node+0x33/0x70 [ 605.403955] ? rcu_read_lock_sched_held+0x108/0x120 [ 605.408978] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 605.414260] ? kasan_unpoison_shadow+0x35/0x50 [ 605.418848] ? kasan_kmalloc+0xc7/0xe0 [ 605.422758] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 605.427962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.433509] ? blk_alloc_queue_node+0x95f/0xe90 [ 605.438188] ? blk_mq_map_swqueue+0xa70/0xa70 [ 605.442686] ? __mutex_init+0x1f7/0x290 [ 605.446684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.454568] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 605.459371] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 605.464575] blk_mq_init_queue+0x63/0xb0 [ 605.468644] loop_add+0x34c/0xa30 [ 605.472109] ? loop_queue_rq+0x690/0x690 [ 605.476186] loop_control_ioctl+0x199/0x530 [ 605.480519] ? loop_add+0xa30/0xa30 [ 605.484153] ? arch_local_save_flags+0x40/0x40 [ 605.488744] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 605.493691] ? loop_add+0xa30/0xa30 [ 605.497326] do_vfs_ioctl+0x1de/0x1720 [ 605.501222] ? ioctl_preallocate+0x300/0x300 [ 605.505639] ? selinux_file_mprotect+0x620/0x620 [ 605.510403] ? __sb_end_write+0xd9/0x110 [ 605.514474] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.520062] ? fput+0x130/0x1a0 [ 605.523347] ? do_syscall_64+0x9a/0x820 [ 605.527330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.532875] ? security_file_ioctl+0x94/0xc0 [ 605.537292] ksys_ioctl+0xa9/0xd0 [ 605.540760] __x64_sys_ioctl+0x73/0xb0 [ 605.544654] do_syscall_64+0x1b9/0x820 [ 605.548547] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 605.553916] ? syscall_return_slowpath+0x5e0/0x5e0 [ 605.558853] ? trace_hardirqs_on_caller+0x310/0x310 [ 605.563871] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 605.568892] ? recalc_sigpending_tsk+0x180/0x180 [ 605.573650] ? kasan_check_write+0x14/0x20 [ 605.577892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.582752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.587948] RIP: 0033:0x457679 00:33:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x105400, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 605.591143] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.610041] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.617760] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 605.625030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 605.632295] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 605.639567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 605.646834] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000021 00:33:54 executing program 3: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x2db) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000580)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/244, 0xf4}], 0x3, 0x0, 0x0, 0x4}, 0x100) sendto$packet(r2, &(0x7f00000001c0)="566c904f4fc57946b3427a80c4c4a7d510004d973c346f3a037c51cbae1c8e54d8ee6ccc4eee19894b809bf0669d1f0c31f099f64b7d54248694095575625c5cd3b31a6b5d6a4dffda9e706acc13ed4d1b37ca7d13a6b7386ccbce523f4687615d085d7a53a44c402c7e52d2b252f1d76db78af295c3a94104f32363e3a44c7eef00def7d7199fc5acdb21bda9", 0x8d, 0x48040, &(0x7f00000005c0)={0x11, 0xfe, r3, 0x1, 0x101, 0x6, @remote}, 0x14) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x283, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:54 executing program 5 (fault-call:4 fault-nth:34): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xde00, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x8b6, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x880, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) [ 605.800477] FAULT_INJECTION: forcing a failure. [ 605.800477] name failslab, interval 1, probability 0, space 0, times 0 [ 605.841460] CPU: 1 PID: 1627 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 605.848697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.858069] Call Trace: [ 605.860678] dump_stack+0x1c4/0x2b4 [ 605.864330] ? dump_stack_print_info.cold.2+0x52/0x52 [ 605.869540] ? lock_downgrade+0x900/0x900 [ 605.873704] ? check_preemption_disabled+0x48/0x200 [ 605.878745] should_fail.cold.4+0xa/0x17 [ 605.882815] ? rcu_bh_qs+0xc0/0xc0 [ 605.886366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 605.891499] ? graph_lock+0x170/0x170 [ 605.895320] ? kernel_text_address+0x79/0xf0 [ 605.899740] ? graph_lock+0x170/0x170 [ 605.903557] ? unwind_get_return_address+0x61/0xa0 [ 605.908517] ? __save_stack_trace+0x8d/0xf0 [ 605.912858] ? find_held_lock+0x36/0x1c0 [ 605.916924] ? __lock_is_held+0xb5/0x140 [ 605.921002] ? ___might_sleep+0x1ed/0x300 [ 605.925153] ? ksys_ioctl+0xa9/0xd0 [ 605.928781] ? arch_local_save_flags+0x40/0x40 [ 605.933367] ? graph_lock+0x170/0x170 [ 605.937177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.942726] __should_failslab+0x124/0x180 [ 605.946970] should_failslab+0x9/0x14 [ 605.950813] kmem_cache_alloc_node_trace+0x270/0x740 [ 605.955918] ? __lock_is_held+0xb5/0x140 [ 605.959994] blk_alloc_flush_queue+0xcd/0x3e0 [ 605.964504] ? blk_insert_flush+0xb00/0xb00 [ 605.968827] ? kasan_unpoison_shadow+0x35/0x50 [ 605.973413] ? kasan_kmalloc+0xc7/0xe0 [ 605.977310] ? __lockdep_init_map+0x105/0x590 [ 605.981816] blk_mq_realloc_hw_ctxs+0x9b2/0x1360 [ 605.986589] ? blk_mq_free_map_and_requests+0x160/0x160 [ 605.991956] ? __lock_is_held+0xb5/0x140 [ 605.996025] ? __kmalloc_node+0x33/0x70 [ 605.999998] ? __kmalloc_node+0x33/0x70 [ 606.003978] ? rcu_read_lock_sched_held+0x108/0x120 [ 606.009003] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 606.014288] ? kasan_unpoison_shadow+0x35/0x50 [ 606.018870] ? kasan_kmalloc+0xc7/0xe0 [ 606.022773] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 606.027985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.033527] ? blk_alloc_queue_node+0x95f/0xe90 [ 606.038201] ? blk_mq_map_swqueue+0xa70/0xa70 [ 606.042699] ? __mutex_init+0x1f7/0x290 [ 606.046698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.052236] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 606.057014] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 606.062212] blk_mq_init_queue+0x63/0xb0 [ 606.066282] loop_add+0x34c/0xa30 [ 606.069742] ? loop_queue_rq+0x690/0x690 [ 606.073819] loop_control_ioctl+0x199/0x530 [ 606.078146] ? loop_add+0xa30/0xa30 [ 606.081777] ? arch_local_save_flags+0x40/0x40 [ 606.086367] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 606.091305] ? loop_add+0xa30/0xa30 [ 606.094938] do_vfs_ioctl+0x1de/0x1720 [ 606.098836] ? ioctl_preallocate+0x300/0x300 [ 606.103255] ? selinux_file_mprotect+0x620/0x620 [ 606.108018] ? __sb_end_write+0xd9/0x110 [ 606.112089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 606.117628] ? fput+0x130/0x1a0 [ 606.120912] ? do_syscall_64+0x9a/0x820 [ 606.124890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.130428] ? security_file_ioctl+0x94/0xc0 [ 606.134843] ksys_ioctl+0xa9/0xd0 [ 606.138304] __x64_sys_ioctl+0x73/0xb0 [ 606.142196] do_syscall_64+0x1b9/0x820 [ 606.146083] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 606.151452] ? syscall_return_slowpath+0x5e0/0x5e0 [ 606.156396] ? trace_hardirqs_on_caller+0x310/0x310 [ 606.161417] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 606.166433] ? recalc_sigpending_tsk+0x180/0x180 [ 606.171190] ? kasan_check_write+0x14/0x20 [ 606.175431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 606.180293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.185479] RIP: 0033:0x457679 [ 606.188687] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.207587] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.215297] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 606.222564] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 606.229829] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 00:33:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x23, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 606.237098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 606.244364] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000022 00:33:54 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:54 executing program 5 (fault-call:4 fault-nth:35): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xa900000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xaf, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000280)={0x43, 0x9, 0x2, {0x20, 0x2, 0x9, 0xa8, 0x3, 0x8, 0x1756, 0xffffffffffffff7f, 0x800}}, 0x43) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="010000050800090004000000080004000800000008000900080000000800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) [ 606.611325] FAULT_INJECTION: forcing a failure. [ 606.611325] name failslab, interval 1, probability 0, space 0, times 0 [ 606.646194] CPU: 0 PID: 1655 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 606.653428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.662794] Call Trace: [ 606.665403] dump_stack+0x1c4/0x2b4 [ 606.669049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 606.674255] ? is_bpf_text_address+0xd3/0x170 [ 606.678783] should_fail.cold.4+0xa/0x17 [ 606.682864] ? __save_stack_trace+0x8d/0xf0 [ 606.687200] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 606.692319] ? graph_lock+0x170/0x170 [ 606.692336] ? save_stack+0xa9/0xd0 [ 606.692353] ? graph_lock+0x170/0x170 [ 606.692374] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 606.699788] ? blk_alloc_flush_queue+0xcd/0x3e0 [ 606.699805] ? blk_mq_realloc_hw_ctxs+0x9b2/0x1360 [ 606.699821] ? blk_mq_init_allocated_queue+0x2bb/0x1680 [ 606.699836] ? blk_mq_init_queue+0x63/0xb0 [ 606.699853] ? loop_add+0x34c/0xa30 [ 606.699868] ? loop_control_ioctl+0x199/0x530 [ 606.699884] ? do_vfs_ioctl+0x1de/0x1720 [ 606.699904] ? find_held_lock+0x36/0x1c0 [ 606.699923] ? __lock_is_held+0xb5/0x140 [ 606.699953] ? ___might_sleep+0x1ed/0x300 [ 606.752553] ? arch_local_save_flags+0x40/0x40 [ 606.757149] __should_failslab+0x124/0x180 [ 606.761401] should_failslab+0x9/0x14 [ 606.765230] kmem_cache_alloc_node_trace+0x270/0x740 [ 606.770351] ? rcu_read_lock_sched_held+0x108/0x120 [ 606.775378] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 606.780663] __kmalloc_node+0x33/0x70 [ 606.784471] blk_alloc_flush_queue+0x180/0x3e0 [ 606.789066] ? blk_insert_flush+0xb00/0xb00 [ 606.793394] ? kasan_unpoison_shadow+0x35/0x50 [ 606.797974] ? kasan_kmalloc+0xc7/0xe0 [ 606.801870] ? __lockdep_init_map+0x105/0x590 [ 606.806376] blk_mq_realloc_hw_ctxs+0x9b2/0x1360 [ 606.811150] ? blk_mq_free_map_and_requests+0x160/0x160 [ 606.816522] ? __lock_is_held+0xb5/0x140 [ 606.820771] ? __kmalloc_node+0x33/0x70 [ 606.824754] ? __kmalloc_node+0x33/0x70 [ 606.828732] ? rcu_read_lock_sched_held+0x108/0x120 [ 606.833769] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 606.839049] ? kasan_unpoison_shadow+0x35/0x50 [ 606.843635] ? kasan_kmalloc+0xc7/0xe0 [ 606.847534] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 606.852728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.858275] ? blk_alloc_queue_node+0x95f/0xe90 [ 606.862952] ? blk_mq_map_swqueue+0xa70/0xa70 [ 606.867449] ? __mutex_init+0x1f7/0x290 [ 606.871448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.876985] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 606.881846] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 606.887047] blk_mq_init_queue+0x63/0xb0 [ 606.891119] loop_add+0x34c/0xa30 [ 606.894583] ? loop_queue_rq+0x690/0x690 [ 606.898656] loop_control_ioctl+0x199/0x530 [ 606.903772] ? loop_add+0xa30/0xa30 [ 606.907406] ? arch_local_save_flags+0x40/0x40 [ 606.912000] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 606.916941] ? loop_add+0xa30/0xa30 [ 606.920575] do_vfs_ioctl+0x1de/0x1720 [ 606.924473] ? ioctl_preallocate+0x300/0x300 [ 606.928896] ? selinux_file_mprotect+0x620/0x620 [ 606.933657] ? __sb_end_write+0xd9/0x110 [ 606.937727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 606.943270] ? fput+0x130/0x1a0 [ 606.946554] ? do_syscall_64+0x9a/0x820 [ 606.950537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.956079] ? security_file_ioctl+0x94/0xc0 [ 606.960505] ksys_ioctl+0xa9/0xd0 [ 606.963968] __x64_sys_ioctl+0x73/0xb0 [ 606.967860] do_syscall_64+0x1b9/0x820 [ 606.971755] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 606.977123] ? syscall_return_slowpath+0x5e0/0x5e0 [ 606.982059] ? trace_hardirqs_on_caller+0x310/0x310 [ 606.987078] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 606.992097] ? recalc_sigpending_tsk+0x180/0x180 [ 606.996853] ? kasan_check_write+0x14/0x20 [ 607.001101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.005953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.011140] RIP: 0033:0x457679 [ 607.014340] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.033263] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.040977] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 607.048247] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 607.055519] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 00:33:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x11, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 607.062787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 607.070053] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000023 00:33:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x80) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x9, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @remote}, 0x40, 0x8, 0x0, 0x800, 0x81, &(0x7f0000000100)='gre0\x00', 0x3ff, 0xffffffffffffffff, 0x1}) 00:33:55 executing program 5 (fault-call:4 fault-nth:36): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc1010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2da, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:55 executing program 0: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x100000000, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000080)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000480)) [ 607.251688] FAULT_INJECTION: forcing a failure. [ 607.251688] name failslab, interval 1, probability 0, space 0, times 0 [ 607.268234] CPU: 1 PID: 1681 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 607.275467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.284834] Call Trace: [ 607.287440] dump_stack+0x1c4/0x2b4 [ 607.291090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 607.296306] ? lock_downgrade+0x900/0x900 [ 607.300463] ? check_preemption_disabled+0x48/0x200 [ 607.305524] should_fail.cold.4+0xa/0x17 [ 607.309600] ? rcu_bh_qs+0xc0/0xc0 [ 607.313164] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 607.318292] ? graph_lock+0x170/0x170 [ 607.322103] ? kernel_text_address+0x79/0xf0 [ 607.326532] ? graph_lock+0x170/0x170 [ 607.330345] ? unwind_get_return_address+0x61/0xa0 [ 607.335298] ? __save_stack_trace+0x8d/0xf0 [ 607.339641] ? find_held_lock+0x36/0x1c0 [ 607.343723] ? __lock_is_held+0xb5/0x140 [ 607.347815] ? ___might_sleep+0x1ed/0x300 [ 607.351974] ? ksys_ioctl+0xa9/0xd0 [ 607.355619] ? arch_local_save_flags+0x40/0x40 [ 607.360215] ? graph_lock+0x170/0x170 [ 607.364053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.369611] __should_failslab+0x124/0x180 [ 607.373871] should_failslab+0x9/0x14 [ 607.377686] kmem_cache_alloc_node_trace+0x270/0x740 [ 607.382799] ? __lock_is_held+0xb5/0x140 [ 607.386891] blk_alloc_flush_queue+0xcd/0x3e0 [ 607.391402] ? blk_insert_flush+0xb00/0xb00 [ 607.395736] ? kasan_unpoison_shadow+0x35/0x50 [ 607.400844] ? kasan_kmalloc+0xc7/0xe0 [ 607.404753] ? __lockdep_init_map+0x105/0x590 [ 607.409303] blk_mq_realloc_hw_ctxs+0x9b2/0x1360 [ 607.414087] ? blk_mq_free_map_and_requests+0x160/0x160 [ 607.419467] ? __lock_is_held+0xb5/0x140 [ 607.423560] ? __kmalloc_node+0x33/0x70 [ 607.427544] ? __kmalloc_node+0x33/0x70 [ 607.431535] ? rcu_read_lock_sched_held+0x108/0x120 [ 607.436568] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 607.441859] ? kasan_unpoison_shadow+0x35/0x50 [ 607.446455] ? kasan_kmalloc+0xc7/0xe0 00:33:55 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000001100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) [ 607.450376] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 607.455585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.461133] ? blk_alloc_queue_node+0x95f/0xe90 [ 607.465820] ? blk_mq_map_swqueue+0xa70/0xa70 [ 607.470327] ? __mutex_init+0x1f7/0x290 [ 607.474339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.479888] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 607.484674] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 607.489882] blk_mq_init_queue+0x63/0xb0 [ 607.493963] loop_add+0x34c/0xa30 [ 607.497434] ? loop_queue_rq+0x690/0x690 [ 607.501523] loop_control_ioctl+0x199/0x530 [ 607.505858] ? loop_add+0xa30/0xa30 [ 607.509511] ? arch_local_save_flags+0x40/0x40 [ 607.514111] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 607.519060] ? loop_add+0xa30/0xa30 [ 607.522715] do_vfs_ioctl+0x1de/0x1720 [ 607.526629] ? ioctl_preallocate+0x300/0x300 [ 607.531056] ? selinux_file_mprotect+0x620/0x620 [ 607.535836] ? __sb_end_write+0xd9/0x110 [ 607.539921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.545478] ? fput+0x130/0x1a0 [ 607.548778] ? do_syscall_64+0x9a/0x820 00:33:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x4, &(0x7f0000000340)=[{&(0x7f00000000c0)="e9114e881fcae41acda96a3f3e77786cfe47e547f63b462e5f46564bcb48475bbd0a2f4c4a05c784642d1e82b86069609c7e495f411394cba7b4d1577120ed78d26ca079138a95da56ba208def59dc3c8ce43735a72386cd57dac8b424db640fbb0fb5f7cbc2e9aa21bdd338abea7c383144242d22531af84fed7c4d51ccbd334f99d554a0ed6bdeeac04ba0f678b576b8bbdc51e33aca3ec979abf0cfb01dbc48240157e13841ee16274b0be7a57deb09549e7443a9508e4ee9db938c", 0xbd, 0x5}, {&(0x7f0000000180)="6becb3a340c827afaba4da4b3ac40f18172d75049c2bfa6e73edda73ca4d2b7389fe6608474bfef5bb45a21b192440436c69c6200389eb55b8aedb4ea43bc8ce0c1dd471b3301addab60f6342f2b2ab4e59bd3dbd4af2d6dcc874f95415967d3cce7fd66715edf5d3ad8cc05bd497f4b7d4383bdc39e76f41bd365e646a45d16c4577b086e15b529a0d12bb705b75f256e251da92645a118eefba6fa031e", 0x9e, 0x8}, {&(0x7f0000000240)="4ff45d1706b8681290e11adba90b26784dfdd8918b0c463a1f7ea69e859a9ef0f41863c3ab728ae8de4ab33d031825139d15c27fd94373b8a05b7094def9dd1135facf91c0544a16831e446f135b41d55458", 0x52, 0x100000001}, {&(0x7f00000002c0)="8e3cf3d2c81d588ef2e545344e5e3d09e83db5d5d27a4808c2e32a3f7e7d966d64cbd86d5994d41b4681fc60b0e7d387c9b3bfc1f5c7739cde8d0079ddd067dfa02040647ad62d8b70ef54f20c51f55dccf64d651248ee6b19cd96573ec4da34a5713126977b61777477a1c82dfcb376e99ce207ff2f4d", 0x77, 0xff}], 0x1000000, &(0x7f00000003c0)={[{@disable_roll_forward='disable_roll_forward'}, {@user_xattr='user_xattr'}, {@two_active_logs='active_logs=2'}, {@discard='discard'}, {@adaptive_mode='mode=adaptive'}]}) [ 607.552770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.558319] ? security_file_ioctl+0x94/0xc0 [ 607.562750] ksys_ioctl+0xa9/0xd0 [ 607.566218] __x64_sys_ioctl+0x73/0xb0 [ 607.570128] do_syscall_64+0x1b9/0x820 [ 607.574028] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 607.579403] ? syscall_return_slowpath+0x5e0/0x5e0 [ 607.584346] ? trace_hardirqs_on_caller+0x310/0x310 [ 607.589375] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 607.594407] ? recalc_sigpending_tsk+0x180/0x180 [ 607.599181] ? kasan_check_write+0x14/0x20 [ 607.603438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.608307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.613519] RIP: 0033:0x457679 [ 607.616715] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.635622] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.643338] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 00:33:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) clock_gettime(0x6, &(0x7f0000000080)) [ 607.650608] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 607.657880] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 607.665148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 607.672416] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000024 00:33:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xf1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:56 executing program 5 (fault-call:4 fault-nth:37): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x2b01000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x218, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$setendian(0x14, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 607.866401] FAULT_INJECTION: forcing a failure. [ 607.866401] name failslab, interval 1, probability 0, space 0, times 0 [ 607.886124] CPU: 0 PID: 1714 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 607.893343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.902703] Call Trace: [ 607.905307] dump_stack+0x1c4/0x2b4 [ 607.908952] ? dump_stack_print_info.cold.2+0x52/0x52 [ 607.914170] should_fail.cold.4+0xa/0x17 [ 607.918245] ? check_preemption_disabled+0x48/0x200 [ 607.923278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 607.928390] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 607.928409] ? kasan_check_read+0x11/0x20 [ 607.938349] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 607.943639] ? rcu_bh_qs+0xc0/0xc0 [ 607.947191] ? graph_lock+0x170/0x170 [ 607.951004] ? rcu_bh_qs+0xc0/0xc0 [ 607.954560] ? unwind_dump+0x190/0x190 [ 607.958469] ? graph_lock+0x170/0x170 [ 607.962300] ? is_bpf_text_address+0xd3/0x170 [ 607.966815] ? find_held_lock+0x36/0x1c0 [ 607.970884] ? __lock_is_held+0xb5/0x140 [ 607.974964] ? ___might_sleep+0x1ed/0x300 [ 607.979109] ? save_stack+0xa9/0xd0 [ 607.982739] ? arch_local_save_flags+0x40/0x40 [ 607.987326] ? save_stack+0x43/0xd0 [ 607.990951] ? kasan_kmalloc+0xc7/0xe0 [ 607.994842] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 608.000122] ? blk_mq_init_tags+0x79/0x2b0 [ 608.004362] ? elevator_init_mq+0xd7/0x160 [ 608.008606] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 608.014064] __should_failslab+0x124/0x180 [ 608.018310] should_failslab+0x9/0x14 [ 608.022117] kmem_cache_alloc_node_trace+0x270/0x740 [ 608.027240] __kmalloc_node+0x33/0x70 [ 608.031046] sbitmap_init_node+0x288/0x440 [ 608.035293] sbitmap_queue_init_node+0xb2/0x850 [ 608.039961] ? __lock_is_held+0xb5/0x140 [ 608.044030] ? sbitmap_init_node+0x440/0x440 [ 608.048440] ? blk_mq_init_tags+0x79/0x2b0 [ 608.052680] ? rcu_read_lock_sched_held+0x108/0x120 [ 608.057705] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 608.062989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 608.068527] ? find_next_bit+0x104/0x130 [ 608.072604] blk_mq_init_tags+0x116/0x2b0 [ 608.076769] blk_mq_alloc_rq_map+0x9f/0x220 [ 608.081097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.086647] blk_mq_init_sched+0x21d/0x770 [ 608.090897] elevator_init_mq+0xd7/0x160 [ 608.094963] blk_mq_init_allocated_queue+0x1074/0x1680 [ 608.100253] ? blk_mq_map_swqueue+0xa70/0xa70 [ 608.104758] ? __mutex_init+0x1f7/0x290 [ 608.108763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.114309] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 608.119080] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 608.124281] blk_mq_init_queue+0x63/0xb0 [ 608.128353] loop_add+0x34c/0xa30 [ 608.131816] ? loop_queue_rq+0x690/0x690 [ 608.135890] loop_control_ioctl+0x199/0x530 [ 608.140213] ? loop_add+0xa30/0xa30 [ 608.143843] ? arch_local_save_flags+0x40/0x40 [ 608.148438] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 608.153388] ? loop_add+0xa30/0xa30 [ 608.157022] do_vfs_ioctl+0x1de/0x1720 [ 608.160922] ? ioctl_preallocate+0x300/0x300 [ 608.165338] ? selinux_file_mprotect+0x620/0x620 [ 608.170134] ? __sb_end_write+0xd9/0x110 [ 608.174222] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 608.179763] ? fput+0x130/0x1a0 [ 608.183047] ? do_syscall_64+0x9a/0x820 [ 608.187032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.192576] ? security_file_ioctl+0x94/0xc0 [ 608.196992] ksys_ioctl+0xa9/0xd0 [ 608.200454] __x64_sys_ioctl+0x73/0xb0 [ 608.204355] do_syscall_64+0x1b9/0x820 [ 608.208245] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 608.213618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 608.218555] ? trace_hardirqs_on_caller+0x310/0x310 [ 608.223577] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 608.228597] ? recalc_sigpending_tsk+0x180/0x180 [ 608.233354] ? kasan_check_write+0x14/0x20 [ 608.237600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.242459] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.247657] RIP: 0033:0x457679 [ 608.250858] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.270288] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.278017] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 608.285296] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 608.292567] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 608.299839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 608.307120] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000025 00:33:56 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 00:33:56 executing program 5 (fault-call:4 fault-nth:38): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1b5, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 608.443598] FAULT_INJECTION: forcing a failure. [ 608.443598] name failslab, interval 1, probability 0, space 0, times 0 [ 608.466799] CPU: 1 PID: 1732 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 608.474016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.483393] Call Trace: [ 608.486000] dump_stack+0x1c4/0x2b4 [ 608.489647] ? dump_stack_print_info.cold.2+0x52/0x52 [ 608.494857] ? elevator_init_mq+0x7f/0x160 [ 608.499124] should_fail.cold.4+0xa/0x17 [ 608.503204] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 608.508328] ? graph_lock+0x170/0x170 [ 608.512142] ? __mutex_lock+0x85e/0x1700 [ 608.516220] ? graph_lock+0x170/0x170 [ 608.520050] ? find_held_lock+0x36/0x1c0 [ 608.524127] ? __lock_is_held+0xb5/0x140 [ 608.528215] ? ___might_sleep+0x1ed/0x300 [ 608.532383] ? arch_local_save_flags+0x40/0x40 [ 608.536978] ? graph_lock+0x170/0x170 [ 608.540804] __should_failslab+0x124/0x180 [ 608.545058] should_failslab+0x9/0x14 [ 608.548877] kmem_cache_alloc_node_trace+0x270/0x740 [ 608.553996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 608.559548] ? find_next_bit+0x104/0x130 [ 608.563634] blk_mq_init_tags+0x79/0x2b0 [ 608.567710] blk_mq_alloc_rq_map+0x9f/0x220 [ 608.572047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.577605] blk_mq_init_sched+0x21d/0x770 [ 608.581864] elevator_init_mq+0xd7/0x160 [ 608.585944] blk_mq_init_allocated_queue+0x1074/0x1680 [ 608.591253] ? blk_mq_map_swqueue+0xa70/0xa70 [ 608.595772] ? __mutex_init+0x1f7/0x290 [ 608.599785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.605336] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 608.610119] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 608.615331] blk_mq_init_queue+0x63/0xb0 [ 608.619413] loop_add+0x34c/0xa30 [ 608.622885] ? loop_queue_rq+0x690/0x690 [ 608.626969] loop_control_ioctl+0x199/0x530 [ 608.631303] ? loop_add+0xa30/0xa30 [ 608.634944] ? arch_local_save_flags+0x40/0x40 [ 608.639542] ? __mutex_unlock_slowpath+0x197/0x8c0 00:33:56 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "736800000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:33:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) io_setup(0x100000001, &(0x7f0000000040)=0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000001100)='/dev/dmmidi#\x00', 0x43, 0x8000) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3d) io_cancel(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000080)="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", 0x1000, 0x6, 0x0, 0x1, r0}, &(0x7f00000010c0)) 00:33:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x500, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_1\x00', 0x10) 00:33:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xcb000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 608.644501] ? loop_add+0xa30/0xa30 [ 608.648149] do_vfs_ioctl+0x1de/0x1720 [ 608.652061] ? ioctl_preallocate+0x300/0x300 [ 608.656496] ? selinux_file_mprotect+0x620/0x620 [ 608.661275] ? __sb_end_write+0xd9/0x110 [ 608.665354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 608.670905] ? fput+0x130/0x1a0 [ 608.674209] ? do_syscall_64+0x9a/0x820 [ 608.678208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.683756] ? security_file_ioctl+0x94/0xc0 [ 608.688187] ksys_ioctl+0xa9/0xd0 [ 608.691664] __x64_sys_ioctl+0x73/0xb0 [ 608.695571] do_syscall_64+0x1b9/0x820 [ 608.699478] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 608.704875] ? syscall_return_slowpath+0x5e0/0x5e0 [ 608.709821] ? trace_hardirqs_on_caller+0x310/0x310 [ 608.714866] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 608.719902] ? recalc_sigpending_tsk+0x180/0x180 [ 608.724679] ? kasan_check_write+0x14/0x20 [ 608.728944] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.733823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.739021] RIP: 0033:0x457679 00:33:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x13b, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 608.742228] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.761144] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.768868] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 608.776137] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 608.783406] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 608.790694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 608.797973] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000026 00:33:57 executing program 5 (fault-call:4 fault-nth:39): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xee, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x199, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x202000000000001, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) socketpair(0x13, 0x800, 0x80000000, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='\x00') getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)=""/250, &(0x7f0000000140)=0xfa) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0x7ff, 0x9, 0x4, 0xfffffffffffffffd, 0x0, 0x6, 0x40, 0x0, 0x9, 0x0, 0x1ff}) 00:33:57 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0xc0002, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xffff, 0xa000, 0x8, 0x377, 0xfffffffffffffffd, 0x3cd, 0x9, {0x0, @in={{0x2, 0x4e22, @local}}, 0xfffffffffffffffd, 0x101, 0xffffffffffff0001, 0x1000, 0x9}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @mcast1, 0x9ef}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x6}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23}], 0x78) [ 609.099980] FAULT_INJECTION: forcing a failure. [ 609.099980] name failslab, interval 1, probability 0, space 0, times 0 [ 609.115734] CPU: 1 PID: 1764 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 609.122950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.132309] Call Trace: [ 609.134919] dump_stack+0x1c4/0x2b4 [ 609.138659] ? dump_stack_print_info.cold.2+0x52/0x52 [ 609.143872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.149421] ? check_preemption_disabled+0x48/0x200 [ 609.154454] should_fail.cold.4+0xa/0x17 [ 609.158549] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 609.163671] ? graph_lock+0x170/0x170 [ 609.167500] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.173049] ? graph_lock+0x170/0x170 [ 609.176875] ? find_held_lock+0x36/0x1c0 [ 609.180958] ? __lock_is_held+0xb5/0x140 [ 609.185045] ? ___might_sleep+0x1ed/0x300 [ 609.189211] ? arch_local_save_flags+0x40/0x40 [ 609.193827] ? __lockdep_init_map+0x105/0x590 [ 609.198346] __should_failslab+0x124/0x180 [ 609.202600] should_failslab+0x9/0x14 [ 609.206409] kmem_cache_alloc_node_trace+0x270/0x740 [ 609.211533] ? init_wait_entry+0x1c0/0x1c0 [ 609.215791] ? check_preemption_disabled+0x48/0x200 [ 609.220823] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 609.225861] sbitmap_queue_init_node+0x332/0x850 [ 609.230629] ? __lock_is_held+0xb5/0x140 [ 609.234715] ? sbitmap_init_node+0x440/0x440 [ 609.239136] ? blk_mq_init_tags+0x79/0x2b0 [ 609.243385] ? rcu_read_lock_sched_held+0x108/0x120 [ 609.248432] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 609.253721] ? find_next_bit+0x104/0x130 [ 609.257804] blk_mq_init_tags+0x177/0x2b0 [ 609.261973] blk_mq_alloc_rq_map+0x9f/0x220 [ 609.266310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.271866] blk_mq_init_sched+0x21d/0x770 [ 609.276128] elevator_init_mq+0xd7/0x160 [ 609.280209] blk_mq_init_allocated_queue+0x1074/0x1680 [ 609.285539] ? blk_mq_map_swqueue+0xa70/0xa70 [ 609.290047] ? __mutex_init+0x1f7/0x290 [ 609.294056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.299612] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 609.304397] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 609.309607] blk_mq_init_queue+0x63/0xb0 [ 609.313682] loop_add+0x34c/0xa30 [ 609.317154] ? loop_queue_rq+0x690/0x690 [ 609.321245] loop_control_ioctl+0x199/0x530 [ 609.325588] ? loop_add+0xa30/0xa30 [ 609.329233] ? arch_local_save_flags+0x40/0x40 [ 609.333849] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 609.338800] ? loop_add+0xa30/0xa30 [ 609.342445] do_vfs_ioctl+0x1de/0x1720 [ 609.346351] ? ioctl_preallocate+0x300/0x300 [ 609.350782] ? selinux_file_mprotect+0x620/0x620 [ 609.355556] ? __sb_end_write+0xd9/0x110 [ 609.359635] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.365179] ? fput+0x130/0x1a0 [ 609.368475] ? do_syscall_64+0x9a/0x820 [ 609.372495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.378048] ? security_file_ioctl+0x94/0xc0 [ 609.382476] ksys_ioctl+0xa9/0xd0 [ 609.385959] __x64_sys_ioctl+0x73/0xb0 [ 609.389867] do_syscall_64+0x1b9/0x820 [ 609.393772] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 609.399151] ? syscall_return_slowpath+0x5e0/0x5e0 [ 609.404094] ? trace_hardirqs_on_caller+0x310/0x310 [ 609.409124] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 609.414151] ? recalc_sigpending_tsk+0x180/0x180 [ 609.418914] ? kasan_check_write+0x14/0x20 [ 609.423163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.428030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.433232] RIP: 0033:0x457679 00:33:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, {0x1ff, 0x1, 0xffffffff, 0x32ca, 0x8, 0x4}, 0xa2a, 0x7}, 0xe) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x0, 0x80000003) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7c, 0x18000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000200)=0x100000000006) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000140)=0x100000008001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) [ 609.436438] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.455355] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.463075] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 609.470350] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 609.477625] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 609.484902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 609.492176] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000027 00:33:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x4100) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0xd8, &(0x7f0000000080)=0x4) 00:33:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x12e, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1aa, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:58 executing program 5 (fault-call:4 fault-nth:40): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x0) r0 = msgget(0x2, 0x100) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/4096) 00:33:58 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 609.825693] FAULT_INJECTION: forcing a failure. [ 609.825693] name failslab, interval 1, probability 0, space 0, times 0 [ 609.838141] CPU: 1 PID: 1805 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 609.845348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.854708] Call Trace: [ 609.857326] dump_stack+0x1c4/0x2b4 [ 609.860973] ? dump_stack_print_info.cold.2+0x52/0x52 [ 609.866178] ? blk_mq_init_sched+0x21d/0x770 [ 609.870616] ? elevator_init_mq+0xd7/0x160 [ 609.874860] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 609.880324] ? blk_mq_init_queue+0x63/0xb0 [ 609.884572] ? loop_control_ioctl+0x199/0x530 [ 609.889083] should_fail.cold.4+0xa/0x17 [ 609.893162] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 609.898290] ? graph_lock+0x170/0x170 [ 609.902108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.907661] ? check_preemption_disabled+0x48/0x200 [ 609.912687] ? check_preemption_disabled+0x48/0x200 [ 609.917716] ? graph_lock+0x170/0x170 [ 609.921536] ? __lock_is_held+0xb5/0x140 [ 609.925603] ? __lockdep_init_map+0x105/0x590 [ 609.930089] ? __lock_is_held+0xb5/0x140 [ 609.934144] ? ___might_sleep+0x1ed/0x300 [ 609.938279] ? arch_local_save_flags+0x40/0x40 [ 609.942857] ? sbitmap_queue_init_node+0xce/0x850 [ 609.942873] ? __lock_is_held+0xb5/0x140 [ 609.942900] __should_failslab+0x124/0x180 [ 609.942922] should_failslab+0x9/0x14 [ 609.942944] kmem_cache_alloc_node_trace+0x270/0x740 [ 609.951833] ? find_next_bit+0x104/0x130 [ 609.951861] __kmalloc_node+0x33/0x70 [ 609.951881] blk_mq_alloc_rq_map+0xcc/0x220 [ 609.951899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.951920] blk_mq_init_sched+0x21d/0x770 [ 609.951948] elevator_init_mq+0xd7/0x160 [ 609.951968] blk_mq_init_allocated_queue+0x1074/0x1680 [ 609.996310] ? blk_mq_map_swqueue+0xa70/0xa70 [ 610.000823] ? __mutex_init+0x1f7/0x290 [ 610.004841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.010396] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 610.015172] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 610.020372] blk_mq_init_queue+0x63/0xb0 [ 610.024440] loop_add+0x34c/0xa30 [ 610.027903] ? loop_queue_rq+0x690/0x690 [ 610.031980] loop_control_ioctl+0x199/0x530 [ 610.036307] ? loop_add+0xa30/0xa30 [ 610.039943] ? arch_local_save_flags+0x40/0x40 [ 610.044540] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 610.049500] ? loop_add+0xa30/0xa30 [ 610.053139] do_vfs_ioctl+0x1de/0x1720 [ 610.057035] ? ioctl_preallocate+0x300/0x300 [ 610.061451] ? selinux_file_mprotect+0x620/0x620 [ 610.066213] ? __sb_end_write+0xd9/0x110 [ 610.070291] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 610.075826] ? fput+0x130/0x1a0 [ 610.079113] ? do_syscall_64+0x9a/0x820 [ 610.083096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.088637] ? security_file_ioctl+0x94/0xc0 [ 610.093056] ksys_ioctl+0xa9/0xd0 [ 610.096523] __x64_sys_ioctl+0x73/0xb0 [ 610.100416] do_syscall_64+0x1b9/0x820 [ 610.104311] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 610.109679] ? syscall_return_slowpath+0x5e0/0x5e0 [ 610.114613] ? trace_hardirqs_on_caller+0x310/0x310 [ 610.119632] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 610.124653] ? recalc_sigpending_tsk+0x180/0x180 [ 610.129414] ? kasan_check_write+0x14/0x20 [ 610.133666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.138533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.143722] RIP: 0033:0x457679 [ 610.146923] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.165831] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:33:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x1ee, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:33:58 executing program 5 (fault-call:4 fault-nth:41): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 610.173554] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 610.180823] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 610.188091] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 610.195359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 610.202629] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000028 00:33:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x42000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 610.309687] FAULT_INJECTION: forcing a failure. [ 610.309687] name failslab, interval 1, probability 0, space 0, times 0 [ 610.344354] CPU: 1 PID: 1818 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 610.351588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.360956] Call Trace: [ 610.363577] dump_stack+0x1c4/0x2b4 [ 610.367227] ? dump_stack_print_info.cold.2+0x52/0x52 [ 610.372456] should_fail.cold.4+0xa/0x17 [ 610.376544] ? kernel_text_address+0x79/0xf0 [ 610.380973] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 610.386089] ? unwind_get_return_address+0x61/0xa0 [ 610.391039] ? __save_stack_trace+0x8d/0xf0 [ 610.395393] ? graph_lock+0x170/0x170 [ 610.399209] ? save_stack+0xa9/0xd0 [ 610.403178] ? save_stack+0x43/0xd0 [ 610.407282] ? kasan_kmalloc+0xc7/0xe0 [ 610.407300] ? __kmalloc_node+0x47/0x70 [ 610.407317] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 610.407334] ? blk_mq_init_sched+0x21d/0x770 [ 610.407351] ? elevator_init_mq+0xd7/0x160 [ 610.407368] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 610.407390] ? __lock_is_held+0xb5/0x140 [ 610.407420] ? ___might_sleep+0x1ed/0x300 [ 610.407439] ? arch_local_save_flags+0x40/0x40 [ 610.407457] ? __lock_is_held+0xb5/0x140 [ 610.407482] __should_failslab+0x124/0x180 [ 610.407515] should_failslab+0x9/0x14 [ 610.407532] kmem_cache_alloc_node_trace+0x270/0x740 [ 610.407549] ? kasan_unpoison_shadow+0x35/0x50 [ 610.407574] __kmalloc_node+0x33/0x70 [ 610.407594] blk_mq_alloc_rq_map+0x10d/0x220 [ 610.407611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.407632] blk_mq_init_sched+0x21d/0x770 [ 610.407661] elevator_init_mq+0xd7/0x160 [ 610.407682] blk_mq_init_allocated_queue+0x1074/0x1680 [ 610.407707] ? blk_mq_map_swqueue+0xa70/0xa70 [ 610.407723] ? __mutex_init+0x1f7/0x290 [ 610.407763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.407779] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 610.407812] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 610.407836] blk_mq_init_queue+0x63/0xb0 [ 610.407857] loop_add+0x34c/0xa30 [ 610.407879] ? loop_queue_rq+0x690/0x690 [ 610.407908] loop_control_ioctl+0x199/0x530 [ 610.407926] ? loop_add+0xa30/0xa30 [ 610.407944] ? arch_local_save_flags+0x40/0x40 [ 610.407968] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 610.407991] ? loop_add+0xa30/0xa30 [ 610.408010] do_vfs_ioctl+0x1de/0x1720 [ 610.408033] ? ioctl_preallocate+0x300/0x300 [ 610.408056] ? selinux_file_mprotect+0x620/0x620 [ 610.408077] ? __sb_end_write+0xd9/0x110 [ 610.408098] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 610.408112] ? fput+0x130/0x1a0 [ 610.408130] ? do_syscall_64+0x9a/0x820 [ 610.408152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.408171] ? security_file_ioctl+0x94/0xc0 [ 610.408191] ksys_ioctl+0xa9/0xd0 [ 610.408211] __x64_sys_ioctl+0x73/0xb0 [ 610.447384] do_syscall_64+0x1b9/0x820 [ 610.455661] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 610.455681] ? syscall_return_slowpath+0x5e0/0x5e0 [ 610.455701] ? trace_hardirqs_on_caller+0x310/0x310 [ 610.455721] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 610.623951] ? recalc_sigpending_tsk+0x180/0x180 [ 610.628717] ? kasan_check_write+0x14/0x20 [ 610.632970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.637829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.643019] RIP: 0033:0x457679 00:33:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x287, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 610.646215] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.665129] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.672845] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 610.680118] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 610.687386] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 610.694659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 610.701930] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000029 00:33:59 executing program 5 (fault-call:4 fault-nth:42): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:59 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20200) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000040)="b147fb881ab4c72534973f83967657fdb96653f9bd6250e782d5b4685faff94d58b29d2ee0526cda41a78dcd87a08d52a7d70993aa749467f174f6d2ebc9e2be0210483ab75bb0d441bc5871fb1621f8cb33112a37cc6c91b76b58bf2f607eda4267b2a92a62c38a7a045ffc32739d7afc096ed5240494db8affe8f260a1d63be82b2dfc804e474b2ad4404f9e189793fec5f6057a03066a828fe1a96cbc606741a806be3c65b2feb5e328a23461dd19bc400c4d3a92d7", 0xb7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x5}, 0x4) 00:33:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x115, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x4a, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x401, 0x1) 00:33:59 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000000000100", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 610.948393] FAULT_INJECTION: forcing a failure. [ 610.948393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 610.967808] CPU: 0 PID: 1845 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 610.975026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.984380] Call Trace: [ 610.986984] dump_stack+0x1c4/0x2b4 [ 610.990635] ? dump_stack_print_info.cold.2+0x52/0x52 00:33:59 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast2, 0x5c, r1}) pipe(&(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x2, 0x2) [ 610.995857] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 611.001676] should_fail.cold.4+0xa/0x17 [ 611.005762] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 611.010889] ? graph_lock+0x170/0x170 [ 611.014706] ? find_held_lock+0x36/0x1c0 [ 611.018806] ? is_bpf_text_address+0xac/0x170 [ 611.023318] ? __lock_is_held+0xb5/0x140 [ 611.027404] ? rcu_bh_qs+0xc0/0xc0 [ 611.030959] ? ___might_sleep+0x1ed/0x300 [ 611.035121] ? arch_local_save_flags+0x40/0x40 [ 611.039723] ? is_bpf_text_address+0xd3/0x170 [ 611.044242] ? __might_sleep+0x95/0x190 00:33:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x276, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 611.048232] __alloc_pages_nodemask+0x34b/0xde0 [ 611.052919] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 611.057950] ? save_stack+0xa9/0xd0 [ 611.061591] ? save_stack+0x43/0xd0 [ 611.065229] ? kasan_kmalloc+0xc7/0xe0 [ 611.069126] ? __kmalloc_node+0x47/0x70 [ 611.073109] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 611.077703] ? blk_mq_init_sched+0x21d/0x770 [ 611.082127] ? do_vfs_ioctl+0x1de/0x1720 [ 611.086199] ? ksys_ioctl+0xa9/0xd0 [ 611.089836] ? __x64_sys_ioctl+0x73/0xb0 [ 611.093908] ? do_syscall_64+0x1b9/0x820 [ 611.097978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.103363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.108910] ? find_next_bit+0x104/0x130 [ 611.112993] ? __cpu_to_node+0x7d/0xa0 [ 611.116895] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 611.121767] blk_mq_alloc_rqs+0x31c/0x980 [ 611.125944] ? blk_mq_alloc_rq_map+0x220/0x220 [ 611.130543] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 611.135834] ? kasan_unpoison_shadow+0x35/0x50 [ 611.140442] ? __kmalloc_node+0x47/0x70 [ 611.144442] blk_mq_init_sched+0x279/0x770 [ 611.148707] elevator_init_mq+0xd7/0x160 [ 611.152794] blk_mq_init_allocated_queue+0x1074/0x1680 [ 611.158097] ? blk_mq_map_swqueue+0xa70/0xa70 [ 611.162611] ? __mutex_init+0x1f7/0x290 [ 611.166621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.172179] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 611.176960] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 611.182175] blk_mq_init_queue+0x63/0xb0 [ 611.186256] loop_add+0x34c/0xa30 [ 611.189731] ? loop_queue_rq+0x690/0x690 [ 611.193828] loop_control_ioctl+0x199/0x530 [ 611.198166] ? loop_add+0xa30/0xa30 [ 611.201808] ? arch_local_save_flags+0x40/0x40 [ 611.206407] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 611.211356] ? loop_add+0xa30/0xa30 [ 611.214996] do_vfs_ioctl+0x1de/0x1720 [ 611.218934] ? ioctl_preallocate+0x300/0x300 [ 611.223358] ? selinux_file_mprotect+0x620/0x620 [ 611.228133] ? __sb_end_write+0xd9/0x110 [ 611.232216] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.237767] ? fput+0x130/0x1a0 [ 611.241060] ? do_syscall_64+0x9a/0x820 [ 611.245059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.250612] ? security_file_ioctl+0x94/0xc0 [ 611.255041] ksys_ioctl+0xa9/0xd0 [ 611.258523] __x64_sys_ioctl+0x73/0xb0 [ 611.262426] do_syscall_64+0x1b9/0x820 [ 611.266326] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 611.271703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 611.276645] ? trace_hardirqs_on_caller+0x310/0x310 [ 611.281673] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 611.286696] ? recalc_sigpending_tsk+0x180/0x180 [ 611.291463] ? kasan_check_write+0x14/0x20 [ 611.295726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.300594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.305792] RIP: 0033:0x457679 [ 611.308993] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.327904] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.335629] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 611.342905] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 611.350184] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 611.357462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 611.364753] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002a 00:33:59 executing program 5 (fault-call:4 fault-nth:43): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:33:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100)=0x3, 0x4) eventfd2(0x3, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000140)={0x3, 0x20, 0x5, 0x600}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x2, 0x0, 0x1, 0x3, 0x7}, 0x0, 0x7}) 00:33:59 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xc8000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:33:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x4c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:33:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000040)=0x1ff, 0x1) 00:33:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x8, 0x4, 0x1}, 0x4}}, 0x18) 00:33:59 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000000000600", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 611.654889] FAULT_INJECTION: forcing a failure. [ 611.654889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.677052] CPU: 0 PID: 1878 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 611.684279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.693658] Call Trace: [ 611.696268] dump_stack+0x1c4/0x2b4 [ 611.699919] ? dump_stack_print_info.cold.2+0x52/0x52 [ 611.705135] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 611.710957] should_fail.cold.4+0xa/0x17 [ 611.715033] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 611.720163] ? graph_lock+0x170/0x170 [ 611.723974] ? find_held_lock+0x36/0x1c0 [ 611.728054] ? is_bpf_text_address+0xac/0x170 [ 611.732579] ? __lock_is_held+0xb5/0x140 [ 611.736657] ? graph_lock+0x170/0x170 [ 611.740482] ? ___might_sleep+0x1ed/0x300 [ 611.744662] ? arch_local_save_flags+0x40/0x40 [ 611.749257] ? __lock_is_held+0xb5/0x140 00:34:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000040)) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0xfff, 0x5}, 0x2) [ 611.749282] ? __might_sleep+0x95/0x190 [ 611.749305] __alloc_pages_nodemask+0x34b/0xde0 [ 611.757335] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 611.757359] ? save_stack+0xa9/0xd0 [ 611.770654] ? save_stack+0x43/0xd0 [ 611.774287] ? kasan_kmalloc+0xc7/0xe0 [ 611.778191] ? __kmalloc_node+0x47/0x70 [ 611.782186] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 611.786791] ? blk_mq_init_sched+0x21d/0x770 [ 611.791217] ? do_vfs_ioctl+0x1de/0x1720 [ 611.795300] ? memset+0x31/0x40 [ 611.798592] ? loop_init_request+0x83/0x180 [ 611.802919] ? loop_info64_from_compat+0x940/0x940 [ 611.807854] ? __cpu_to_node+0x7d/0xa0 [ 611.811761] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 611.816619] blk_mq_alloc_rqs+0x31c/0x980 [ 611.820791] ? blk_mq_alloc_rq_map+0x220/0x220 [ 611.825379] ? kasan_unpoison_shadow+0x35/0x50 [ 611.829975] ? __kmalloc_node+0x47/0x70 [ 611.833967] blk_mq_init_sched+0x279/0x770 [ 611.838219] elevator_init_mq+0xd7/0x160 [ 611.842294] blk_mq_init_allocated_queue+0x1074/0x1680 [ 611.847584] ? blk_mq_map_swqueue+0xa70/0xa70 [ 611.852087] ? __mutex_init+0x1f7/0x290 [ 611.856087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.861627] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 611.866405] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 611.871604] blk_mq_init_queue+0x63/0xb0 [ 611.875676] loop_add+0x34c/0xa30 [ 611.879138] ? loop_queue_rq+0x690/0x690 [ 611.883217] loop_control_ioctl+0x199/0x530 [ 611.887546] ? loop_add+0xa30/0xa30 [ 611.891188] ? arch_local_save_flags+0x40/0x40 [ 611.895787] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 611.900729] ? loop_add+0xa30/0xa30 [ 611.904372] do_vfs_ioctl+0x1de/0x1720 [ 611.908270] ? ioctl_preallocate+0x300/0x300 [ 611.912693] ? selinux_file_mprotect+0x620/0x620 [ 611.917457] ? __sb_end_write+0xd9/0x110 [ 611.921537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.927073] ? fput+0x130/0x1a0 [ 611.930361] ? do_syscall_64+0x9a/0x820 [ 611.934347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.939894] ? security_file_ioctl+0x94/0xc0 [ 611.944314] ksys_ioctl+0xa9/0xd0 [ 611.947777] __x64_sys_ioctl+0x73/0xb0 [ 611.951677] do_syscall_64+0x1b9/0x820 [ 611.955569] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 611.960946] ? syscall_return_slowpath+0x5e0/0x5e0 [ 611.965889] ? trace_hardirqs_on_caller+0x310/0x310 [ 611.970920] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 611.975940] ? recalc_sigpending_tsk+0x180/0x180 [ 611.980699] ? kasan_check_write+0x14/0x20 [ 611.984953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.989806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.995015] RIP: 0033:0x457679 [ 611.998213] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.017124] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.024844] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 612.032123] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 612.039390] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.046660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 612.053933] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002b 00:34:00 executing program 5 (fault-call:4 fault-nth:44): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x4600000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:34:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:34:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0xd0, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:34:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:34:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000080)=0x101, 0xffffffffffffffdf) [ 612.346182] FAULT_INJECTION: forcing a failure. [ 612.346182] name failslab, interval 1, probability 0, space 0, times 0 [ 612.387227] CPU: 1 PID: 1906 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 612.394471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.404328] Call Trace: [ 612.406951] dump_stack+0x1c4/0x2b4 [ 612.410604] ? dump_stack_print_info.cold.2+0x52/0x52 [ 612.415926] ? __save_stack_trace+0x8d/0xf0 [ 612.420282] should_fail.cold.4+0xa/0x17 [ 612.424367] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 612.429497] ? save_stack+0x43/0xd0 [ 612.433136] ? kasan_kmalloc+0xc7/0xe0 [ 612.437032] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 612.442326] ? elevator_alloc+0x82/0x200 [ 612.446400] ? dd_init_queue+0x9f/0x600 [ 612.450392] ? graph_lock+0x170/0x170 [ 612.454208] ? blk_mq_init_queue+0x63/0xb0 [ 612.458462] ? loop_add+0x34c/0xa30 [ 612.462111] ? loop_control_ioctl+0x199/0x530 [ 612.466616] ? do_vfs_ioctl+0x1de/0x1720 [ 612.470689] ? ksys_ioctl+0xa9/0xd0 [ 612.474329] ? graph_lock+0x170/0x170 [ 612.478151] ? find_held_lock+0x36/0x1c0 [ 612.482236] ? find_held_lock+0x36/0x1c0 [ 612.486320] ? __lock_is_held+0xb5/0x140 [ 612.490411] ? ___might_sleep+0x1ed/0x300 [ 612.494573] ? arch_local_save_flags+0x40/0x40 [ 612.499164] ? __ia32_sys_membarrier+0x150/0x150 [ 612.503926] ? kasan_check_write+0x14/0x20 [ 612.508173] ? kobject_init+0x23d/0x2f0 [ 612.512167] __should_failslab+0x124/0x180 [ 612.516416] should_failslab+0x9/0x14 [ 612.520227] kmem_cache_alloc_node_trace+0x270/0x740 [ 612.525360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.530925] dd_init_queue+0x111/0x600 [ 612.534834] ? dd_exit_queue+0x250/0x250 [ 612.538914] ? kasan_unpoison_shadow+0x35/0x50 [ 612.543526] ? __kmalloc_node+0x47/0x70 [ 612.547540] blk_mq_init_sched+0x3b3/0x770 [ 612.551806] elevator_init_mq+0xd7/0x160 [ 612.555882] blk_mq_init_allocated_queue+0x1074/0x1680 [ 612.561180] ? blk_mq_map_swqueue+0xa70/0xa70 [ 612.565691] ? __mutex_init+0x1f7/0x290 [ 612.569703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.575280] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 612.580060] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 612.585270] blk_mq_init_queue+0x63/0xb0 [ 612.589344] loop_add+0x34c/0xa30 [ 612.592822] ? loop_queue_rq+0x690/0x690 [ 612.596906] loop_control_ioctl+0x199/0x530 [ 612.601256] ? loop_add+0xa30/0xa30 [ 612.604901] ? arch_local_save_flags+0x40/0x40 [ 612.609512] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 612.614461] ? loop_add+0xa30/0xa30 [ 612.618110] do_vfs_ioctl+0x1de/0x1720 [ 612.622015] ? ioctl_preallocate+0x300/0x300 [ 612.626443] ? selinux_file_mprotect+0x620/0x620 [ 612.631214] ? __sb_end_write+0xd9/0x110 [ 612.635297] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 612.640844] ? fput+0x130/0x1a0 [ 612.644132] ? do_syscall_64+0x9a/0x820 [ 612.648122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.653675] ? security_file_ioctl+0x94/0xc0 [ 612.658103] ksys_ioctl+0xa9/0xd0 [ 612.661575] __x64_sys_ioctl+0x73/0xb0 [ 612.665496] do_syscall_64+0x1b9/0x820 [ 612.669396] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 612.674771] ? syscall_return_slowpath+0x5e0/0x5e0 [ 612.679722] ? trace_hardirqs_on_caller+0x310/0x310 [ 612.684749] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 612.689780] ? recalc_sigpending_tsk+0x180/0x180 [ 612.694551] ? kasan_check_write+0x14/0x20 [ 612.698807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.703671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.708872] RIP: 0033:0x457679 [ 612.712073] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.730982] RSP: 002b:00007f31abd22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:34:01 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "7368000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:34:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xbf00000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 612.738705] RAX: ffffffffffffffda RBX: 00007f31abd236d4 RCX: 0000000000457679 [ 612.745987] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 612.753268] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.760546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 612.768069] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002c 00:34:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x210, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:34:01 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x10000) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080), 0x1) 00:34:01 executing program 5 (fault-call:4 fault-nth:45): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$inet6(0xa, 0x80005, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0x6, 0x7, 0x94, 0x1ff}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0xf, 0x202, 0x40, 0x200, r2}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') ioctl$TIOCEXCL(r3, 0x540c) 00:34:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2a4, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 612.947120] FAULT_INJECTION: forcing a failure. [ 612.947120] name failslab, interval 1, probability 0, space 0, times 0 [ 612.973804] CPU: 1 PID: 1938 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 612.981040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.990406] Call Trace: [ 612.993017] dump_stack+0x1c4/0x2b4 [ 612.996665] ? dump_stack_print_info.cold.2+0x52/0x52 [ 613.001880] should_fail.cold.4+0xa/0x17 [ 613.001903] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 613.001926] ? graph_lock+0x170/0x170 [ 613.011081] ? blk_mq_debugfs_register_sched_hctx+0x14d/0x1b0 [ 613.011097] ? graph_lock+0x170/0x170 [ 613.011113] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 613.011131] ? blk_mq_init_sched+0x36a/0x770 [ 613.011154] ? find_held_lock+0x36/0x1c0 [ 613.011179] ? __lock_is_held+0xb5/0x140 [ 613.042176] ? ___might_sleep+0x1ed/0x300 [ 613.046335] ? arch_local_save_flags+0x40/0x40 [ 613.050928] ? find_held_lock+0x36/0x1c0 [ 613.055006] __should_failslab+0x124/0x180 [ 613.059254] should_failslab+0x9/0x14 [ 613.063066] kmem_cache_alloc_node_trace+0x270/0x740 [ 613.068172] ? lockdep_hardirqs_on+0x421/0x5c0 [ 613.072766] ? trace_hardirqs_on+0xbd/0x310 [ 613.077092] ? kasan_check_read+0x11/0x20 [ 613.081259] __alloc_disk_node+0xc9/0x510 [ 613.085419] ? disk_expand_part_tbl+0x3d0/0x3d0 [ 613.090100] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 613.095211] ? blk_queue_flag_set+0xf6/0x160 [ 613.099628] loop_add+0x42f/0xa30 [ 613.103094] ? loop_queue_rq+0x690/0x690 [ 613.107172] loop_control_ioctl+0x199/0x530 [ 613.111508] ? loop_add+0xa30/0xa30 [ 613.115139] ? arch_local_save_flags+0x40/0x40 [ 613.119731] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 613.124674] ? loop_add+0xa30/0xa30 [ 613.128305] do_vfs_ioctl+0x1de/0x1720 [ 613.132204] ? ioctl_preallocate+0x300/0x300 [ 613.136624] ? selinux_file_mprotect+0x620/0x620 [ 613.141390] ? __sb_end_write+0xd9/0x110 [ 613.145462] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 613.151009] ? fput+0x130/0x1a0 [ 613.154324] ? do_syscall_64+0x9a/0x820 [ 613.158306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.163849] ? security_file_ioctl+0x94/0xc0 [ 613.168273] ksys_ioctl+0xa9/0xd0 [ 613.171740] __x64_sys_ioctl+0x73/0xb0 [ 613.175639] do_syscall_64+0x1b9/0x820 [ 613.179533] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 613.184902] ? syscall_return_slowpath+0x5e0/0x5e0 [ 613.189837] ? trace_hardirqs_on_caller+0x310/0x310 [ 613.194863] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 613.199884] ? recalc_sigpending_tsk+0x180/0x180 [ 613.204646] ? kasan_check_write+0x14/0x20 [ 613.208897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.213752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.218940] RIP: 0033:0x457679 [ 613.222136] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.241039] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.248754] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 613.256027] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 613.263293] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 613.270563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 613.277833] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002d 00:34:01 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000011}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) fcntl$setsig(r0, 0xa, 0x30) write$P9_RSTATu(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="710000007d020000005c000000030000001002000000060000000000000000000000e0ffffff010000003f0000000000000009006367726f7570656d300a002f6465762f76686369800c0073797374656d3828727070300a002f6465762f76686369000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x71) 00:34:01 executing program 5 (fault-call:4 fault-nth:46): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6000000000000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:34:01 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0xc5aa, 0x49) [ 613.429537] FAULT_INJECTION: forcing a failure. [ 613.429537] name failslab, interval 1, probability 0, space 0, times 0 [ 613.468818] CPU: 0 PID: 1958 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 613.476034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.485390] Call Trace: [ 613.487999] dump_stack+0x1c4/0x2b4 [ 613.491650] ? dump_stack_print_info.cold.2+0x52/0x52 [ 613.496868] should_fail.cold.4+0xa/0x17 [ 613.500955] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 613.506072] ? graph_lock+0x170/0x170 [ 613.509890] ? wait_for_completion+0x8a0/0x8a0 [ 613.514498] ? graph_lock+0x170/0x170 [ 613.518313] ? check_preemption_disabled+0x48/0x200 [ 613.523341] ? check_preemption_disabled+0x48/0x200 [ 613.528369] ? graph_lock+0x170/0x170 [ 613.532191] ? find_held_lock+0x36/0x1c0 [ 613.536272] ? __lock_is_held+0xb5/0x140 [ 613.540357] ? ___might_sleep+0x1ed/0x300 [ 613.544529] ? arch_local_save_flags+0x40/0x40 [ 613.549125] ? pcpu_balance_workfn+0x1740/0x1740 [ 613.553907] __should_failslab+0x124/0x180 [ 613.558161] should_failslab+0x9/0x14 [ 613.561974] kmem_cache_alloc_node_trace+0x270/0x740 [ 613.567093] ? lockdep_init_map+0x9/0x10 [ 613.571178] __kmalloc_node+0x33/0x70 [ 613.574993] disk_expand_part_tbl+0x24b/0x3d0 [ 613.579515] ? blk_free_devt+0x60/0x60 [ 613.583418] ? trace_hardirqs_on+0xbd/0x310 [ 613.587764] __alloc_disk_node+0x177/0x510 [ 613.592017] ? disk_expand_part_tbl+0x3d0/0x3d0 [ 613.596714] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 613.601838] ? blk_queue_flag_set+0xf6/0x160 [ 613.606265] loop_add+0x42f/0xa30 [ 613.609738] ? loop_queue_rq+0x690/0x690 [ 613.613832] loop_control_ioctl+0x199/0x530 [ 613.618169] ? loop_add+0xa30/0xa30 [ 613.621813] ? arch_local_save_flags+0x40/0x40 [ 613.626415] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 613.631362] ? loop_add+0xa30/0xa30 [ 613.635004] do_vfs_ioctl+0x1de/0x1720 [ 613.638910] ? ioctl_preallocate+0x300/0x300 [ 613.643336] ? selinux_file_mprotect+0x620/0x620 [ 613.648107] ? __sb_end_write+0xd9/0x110 [ 613.652186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 613.657768] ? fput+0x130/0x1a0 [ 613.661081] ? do_syscall_64+0x9a/0x820 [ 613.665100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.670651] ? security_file_ioctl+0x94/0xc0 [ 613.675078] ksys_ioctl+0xa9/0xd0 00:34:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x124, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 613.678546] __x64_sys_ioctl+0x73/0xb0 [ 613.682452] do_syscall_64+0x1b9/0x820 [ 613.686361] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 613.691740] ? syscall_return_slowpath+0x5e0/0x5e0 [ 613.696696] ? trace_hardirqs_on_caller+0x310/0x310 [ 613.701808] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 613.706834] ? recalc_sigpending_tsk+0x180/0x180 [ 613.711600] ? kasan_check_write+0x14/0x20 [ 613.715853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.720725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.725944] RIP: 0033:0x457679 [ 613.729148] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.748061] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.755782] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 613.763065] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 613.770345] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 613.777620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 613.784899] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002e [ 613.792822] audit: type=1400 audit(1537576441.768:32): avc: denied { block_suspend } for pid=1959 comm="syz-executor3" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 00:34:02 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000000000000011", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:34:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x3, 0x3, 0x5, 0x0, '\x00', 0xff}) 00:34:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40100, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x62, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) 00:34:02 executing program 5 (fault-call:4 fault-nth:47): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x83010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:34:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x7, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 614.070946] FAULT_INJECTION: forcing a failure. [ 614.070946] name failslab, interval 1, probability 0, space 0, times 0 [ 614.104370] CPU: 0 PID: 1987 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 614.111609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.120972] Call Trace: [ 614.123577] dump_stack+0x1c4/0x2b4 [ 614.127234] ? dump_stack_print_info.cold.2+0x52/0x52 [ 614.132463] should_fail.cold.4+0xa/0x17 [ 614.136551] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 614.141670] ? graph_lock+0x170/0x170 [ 614.145479] ? wait_for_completion+0x8a0/0x8a0 [ 614.150086] ? graph_lock+0x170/0x170 [ 614.153908] ? check_preemption_disabled+0x48/0x200 [ 614.158927] ? check_preemption_disabled+0x48/0x200 [ 614.163956] ? graph_lock+0x170/0x170 [ 614.167831] ? find_held_lock+0x36/0x1c0 [ 614.171905] ? __lock_is_held+0xb5/0x140 [ 614.171937] ? ___might_sleep+0x1ed/0x300 [ 614.171955] ? arch_local_save_flags+0x40/0x40 [ 614.171973] ? pcpu_balance_workfn+0x1740/0x1740 [ 614.172000] __should_failslab+0x124/0x180 [ 614.172020] should_failslab+0x9/0x14 [ 614.172038] kmem_cache_alloc_node_trace+0x270/0x740 [ 614.172069] ? lockdep_init_map+0x9/0x10 [ 614.172109] __kmalloc_node+0x33/0x70 [ 614.172129] disk_expand_part_tbl+0x24b/0x3d0 [ 614.180331] ? blk_free_devt+0x60/0x60 [ 614.180349] ? trace_hardirqs_on+0xbd/0x310 [ 614.180400] __alloc_disk_node+0x177/0x510 [ 614.180433] ? disk_expand_part_tbl+0x3d0/0x3d0 [ 614.180451] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 614.180468] ? blk_queue_flag_set+0xf6/0x160 [ 614.180502] loop_add+0x42f/0xa30 [ 614.180524] ? loop_queue_rq+0x690/0x690 [ 614.180552] loop_control_ioctl+0x199/0x530 [ 614.253652] ? loop_add+0xa30/0xa30 [ 614.257297] ? arch_local_save_flags+0x40/0x40 [ 614.261888] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 614.266825] ? loop_add+0xa30/0xa30 [ 614.270905] do_vfs_ioctl+0x1de/0x1720 [ 614.274801] ? ioctl_preallocate+0x300/0x300 [ 614.279220] ? selinux_file_mprotect+0x620/0x620 [ 614.283987] ? __sb_end_write+0xd9/0x110 [ 614.288059] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 614.293598] ? fput+0x130/0x1a0 [ 614.296884] ? do_syscall_64+0x9a/0x820 [ 614.300865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.306405] ? security_file_ioctl+0x94/0xc0 [ 614.310819] ksys_ioctl+0xa9/0xd0 [ 614.314282] __x64_sys_ioctl+0x73/0xb0 [ 614.318177] do_syscall_64+0x1b9/0x820 [ 614.322072] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 614.327442] ? syscall_return_slowpath+0x5e0/0x5e0 [ 614.332401] ? trace_hardirqs_on_caller+0x310/0x310 [ 614.337425] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 614.342447] ? recalc_sigpending_tsk+0x180/0x180 [ 614.347206] ? kasan_check_write+0x14/0x20 [ 614.351622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.356477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.361676] RIP: 0033:0x457679 [ 614.364876] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.383779] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.391499] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 614.398771] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 614.406309] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 614.413580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:34:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x400) ioctl$VT_ACTIVATE(r1, 0x5606, 0x81) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'gre0\x00', 0x7fffffff}) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:34:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x43, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 00:34:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x103000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in=@local}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0xbd, @empty, 0x4e22, 0x4, 'sed\x00', 0x2f, 0x8, 0x37}, 0x2c) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x101, 0x1) [ 614.420847] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 000000000000002f 00:34:02 executing program 5 (fault-call:4 fault-nth:48): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x71010000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 614.527683] IPVS: set_ctl: invalid protocol: 189 0.0.0.0:20002 00:34:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x2b2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 614.572988] IPVS: set_ctl: invalid protocol: 189 0.0.0.0:20002 [ 614.597633] FAULT_INJECTION: forcing a failure. [ 614.597633] name failslab, interval 1, probability 0, space 0, times 0 [ 614.616059] CPU: 1 PID: 2011 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 614.623270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.632629] Call Trace: [ 614.635238] dump_stack+0x1c4/0x2b4 [ 614.638902] ? dump_stack_print_info.cold.2+0x52/0x52 [ 614.644121] should_fail.cold.4+0xa/0x17 [ 614.648207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 614.653326] ? graph_lock+0x170/0x170 [ 614.657144] ? blk_mq_debugfs_register_sched_hctx+0x14d/0x1b0 [ 614.663043] ? graph_lock+0x170/0x170 [ 614.666856] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 614.671887] ? blk_mq_init_sched+0x36a/0x770 [ 614.676316] ? find_held_lock+0x36/0x1c0 [ 614.680394] ? __lock_is_held+0xb5/0x140 [ 614.684478] ? ___might_sleep+0x1ed/0x300 [ 614.688658] ? arch_local_save_flags+0x40/0x40 [ 614.693263] ? find_held_lock+0x36/0x1c0 [ 614.697352] __should_failslab+0x124/0x180 [ 614.701609] should_failslab+0x9/0x14 [ 614.705425] kmem_cache_alloc_node_trace+0x270/0x740 [ 614.710543] ? lockdep_hardirqs_on+0x421/0x5c0 [ 614.715137] ? trace_hardirqs_on+0xbd/0x310 [ 614.719468] ? kasan_check_read+0x11/0x20 [ 614.723641] __alloc_disk_node+0xc9/0x510 [ 614.727803] ? disk_expand_part_tbl+0x3d0/0x3d0 [ 614.732500] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 614.737620] ? blk_queue_flag_set+0xf6/0x160 [ 614.742051] loop_add+0x42f/0xa30 [ 614.745531] ? loop_queue_rq+0x690/0x690 [ 614.749620] loop_control_ioctl+0x199/0x530 [ 614.753954] ? loop_add+0xa30/0xa30 [ 614.757598] ? arch_local_save_flags+0x40/0x40 [ 614.762204] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 614.767153] ? loop_add+0xa30/0xa30 [ 614.770793] do_vfs_ioctl+0x1de/0x1720 [ 614.774701] ? ioctl_preallocate+0x300/0x300 [ 614.779130] ? selinux_file_mprotect+0x620/0x620 [ 614.783902] ? __sb_end_write+0xd9/0x110 [ 614.787984] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 614.793529] ? fput+0x130/0x1a0 [ 614.796824] ? do_syscall_64+0x9a/0x820 [ 614.800812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.806365] ? security_file_ioctl+0x94/0xc0 [ 614.810793] ksys_ioctl+0xa9/0xd0 [ 614.814299] __x64_sys_ioctl+0x73/0xb0 [ 614.818196] do_syscall_64+0x1b9/0x820 [ 614.822092] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 614.827469] ? syscall_return_slowpath+0x5e0/0x5e0 [ 614.832446] ? trace_hardirqs_on_caller+0x310/0x310 [ 614.837471] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 614.842512] ? recalc_sigpending_tsk+0x180/0x180 [ 614.847280] ? kasan_check_write+0x14/0x20 [ 614.851567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.856428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.861634] RIP: 0033:0x457679 [ 614.864837] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.883747] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.891466] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 614.898749] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 614.906022] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 614.913298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 614.920568] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000030 00:34:03 executing program 2: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000340)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, "73680000000000000000008800", 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:34:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0xb9, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:34:03 executing program 5 (fault-call:4 fault-nth:49): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 00:34:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) write$UHID_CREATE(r0, &(0x7f0000000180)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/218, 0xda, 0x3, 0x0, 0x7ff, 0x39, 0x6}, 0x120) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f00000002c0)=""/145, 0x91, &(0x7f0000000380)=""/142, 0x3, 0x3}}, 0x68) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'\x00', &(0x7f00000005c0)=@ethtool_perm_addr={0x20, 0x1000, "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"}}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000580)={0x1, r0, 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x6000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001640)={0x6, 0x1, 0x5, 0x6, 0x200, 0x0, 0x7fff, 0x1bd, 0xd4d2, 0x7, 0xdd, 0x3}) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000500)=0x101, 0xfffffffffffffef5) 00:34:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x802000000000000d, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x41, 0x2}, &(0x7f0000000100)=0x0) timer_gettime(r1, &(0x7f0000000140)) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x7ff, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x1f, 0x4) [ 615.127617] FAULT_INJECTION: forcing a failure. [ 615.127617] name failslab, interval 1, probability 0, space 0, times 0 [ 615.145198] CPU: 0 PID: 2032 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 615.152402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.161767] Call Trace: [ 615.164366] dump_stack+0x1c4/0x2b4 [ 615.168005] ? dump_stack_print_info.cold.2+0x52/0x52 [ 615.173209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.178770] ? check_preemption_disabled+0x48/0x200 [ 615.183817] should_fail.cold.4+0xa/0x17 [ 615.187897] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 615.193029] ? graph_lock+0x170/0x170 [ 615.196848] ? __lockdep_init_map+0x105/0x590 [ 615.201354] ? lockdep_init_map+0x9/0x10 [ 615.205426] ? graph_lock+0x170/0x170 [ 615.209239] ? lockdep_init_map+0x9/0x10 [ 615.213323] ? find_held_lock+0x36/0x1c0 [ 615.217485] ? __lock_is_held+0xb5/0x140 [ 615.221572] ? ___might_sleep+0x1ed/0x300 [ 615.221587] ? set_precision+0xe0/0xe0 [ 615.221606] ? arch_local_save_flags+0x40/0x40 [ 615.221623] ? device_pm_sleep_init+0xf0/0x210 [ 615.221648] __should_failslab+0x124/0x180 [ 615.243073] should_failslab+0x9/0x14 [ 615.246892] __kmalloc_track_caller+0x2d0/0x750 [ 615.251574] ? pointer+0x990/0x990 [ 615.255137] ? kvasprintf_const+0x67/0x190 [ 615.259389] kvasprintf+0xb5/0x150 [ 615.262937] ? bust_spinlocks+0xe0/0xe0 [ 615.266921] ? device_create_groups_vargs+0xa7/0x270 [ 615.272027] ? rcu_read_lock_sched_held+0x108/0x120 [ 615.277047] kvasprintf_const+0x67/0x190 [ 615.281120] kobject_set_name_vargs+0x5b/0x150 [ 615.285710] device_create_groups_vargs+0x1cd/0x270 [ 615.290908] device_create_vargs+0x46/0x60 [ 615.295155] bdi_register_va.part.10+0xc3/0x9c0 [ 615.299829] ? __lockdep_init_map+0x105/0x590 [ 615.304328] ? cgwb_kill+0x640/0x640 [ 615.308046] ? lockdep_init_map+0x9/0x10 [ 615.312114] ? __init_waitqueue_head+0x9e/0x150 [ 615.316817] ? init_wait_entry+0x1c0/0x1c0 [ 615.321061] ? __lockdep_init_map+0x105/0x590 [ 615.325580] ? pm_runtime_init+0x459/0x560 [ 615.329816] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 615.335189] bdi_register+0x111/0x130 [ 615.338991] ? bdi_register_va+0x80/0x80 [ 615.343074] bdi_register_owner+0x5e/0x100 [ 615.347310] __device_add_disk+0xf25/0x1360 [ 615.351641] ? blk_alloc_devt+0x2e0/0x2e0 [ 615.355787] ? vsnprintf+0x20d/0x1b60 [ 615.359608] ? pointer+0x990/0x990 [ 615.363149] ? __mutex_init+0x1f7/0x290 [ 615.367125] ? __ia32_sys_membarrier+0x150/0x150 [ 615.371889] ? sprintf+0xb0/0xe0 [ 615.375266] ? scnprintf+0x130/0x130 [ 615.378996] ? __lockdep_init_map+0x105/0x590 [ 615.383509] device_add_disk+0x22/0x30 [ 615.387405] loop_add+0x741/0xa30 [ 615.390869] ? loop_queue_rq+0x690/0x690 [ 615.394943] loop_control_ioctl+0x199/0x530 [ 615.399311] ? loop_add+0xa30/0xa30 [ 615.402938] ? arch_local_save_flags+0x40/0x40 [ 615.407532] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 615.412468] ? loop_add+0xa30/0xa30 [ 615.416108] do_vfs_ioctl+0x1de/0x1720 [ 615.420023] ? ioctl_preallocate+0x300/0x300 [ 615.424442] ? selinux_file_mprotect+0x620/0x620 [ 615.429202] ? __sb_end_write+0xd9/0x110 [ 615.433285] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.438837] ? fput+0x130/0x1a0 [ 615.442123] ? do_syscall_64+0x9a/0x820 [ 615.446106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.451648] ? security_file_ioctl+0x94/0xc0 [ 615.456062] ksys_ioctl+0xa9/0xd0 [ 615.459533] __x64_sys_ioctl+0x73/0xb0 [ 615.463428] do_syscall_64+0x1b9/0x820 [ 615.467320] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 615.472692] ? syscall_return_slowpath+0x5e0/0x5e0 [ 615.477626] ? trace_hardirqs_on_caller+0x310/0x310 [ 615.482646] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 615.487668] ? recalc_sigpending_tsk+0x180/0x180 [ 615.492425] ? kasan_check_write+0x14/0x20 [ 615.496672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.501532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.506722] RIP: 0033:0x457679 [ 615.509920] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:34:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x22c, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 615.528819] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.536531] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 615.543797] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 615.551067] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 615.558337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 615.565605] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000031 [ 615.577747] WARNING: CPU: 1 PID: 2032 at block/genhd.c:697 __device_add_disk+0x1068/0x1360 [ 615.586166] Kernel panic - not syncing: panic_on_warn set ... [ 615.586166] [ 615.593542] CPU: 1 PID: 2032 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #28 [ 615.600728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.610086] Call Trace: [ 615.612693] dump_stack+0x1c4/0x2b4 [ 615.616338] ? dump_stack_print_info.cold.2+0x52/0x52 [ 615.621557] panic+0x238/0x4e7 [ 615.624792] ? add_taint.cold.5+0x16/0x16 [ 615.628972] ? __warn.cold.8+0x148/0x1ba [ 615.633047] ? __device_add_disk+0x1068/0x1360 [ 615.637643] __warn.cold.8+0x163/0x1ba [ 615.641548] ? rcu_bh_qs+0xc0/0xc0 [ 615.645101] ? __device_add_disk+0x1068/0x1360 [ 615.649694] report_bug+0x254/0x2d0 [ 615.653338] do_error_trap+0x1fc/0x4d0 [ 615.657238] ? init_wait_entry+0x1c0/0x1c0 [ 615.661510] ? math_error+0x3f0/0x3f0 [ 615.665329] ? __lockdep_init_map+0x105/0x590 [ 615.669841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.674695] ? trace_hardirqs_on_caller+0x310/0x310 00:34:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5527e67ce3350d6f, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x4, &(0x7f0000000000)=0x141, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x7ff, 0xffffffffffffff7f, {"20a32db6c1ee9cb0f9c9c02f5bfcebd1"}, 0x1, 0x1, 0xffffffff}, @in={0x2, 0x4e22, @loopback}}}, 0x118) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x80002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x77, 0x1, 0x100000000, 0x0, 0x0, 0x8, 0x40000, 0x2, 0x2, 0x6, 0x401, 0x0, 0xff, 0x2, 0x7, 0x7ff, 0x8, 0x7d3a, 0x8, 0x96, 0x3f, 0x0, 0xffffffffffff318a, 0xffffffffffffffc1, 0x8, 0x6, 0xfffffffffffffc01, 0x1a6abb5c, 0x3, 0xfffffffffffff001, 0x7, 0xa0a3, 0x5, 0x3f67, 0x1000, 0x8, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000240)}, 0x5000, 0x5, 0x1, 0x7, 0x2, 0x19d, 0x4}, r4, 0x0, r3, 0x9) r5 = accept(r0, &(0x7f0000000640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000580)=0xfffffffffffffee6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x102, 0x0) 00:34:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x188, 0x2b, 0x8, 0x70bd2c, 0x25dfdbfb, {0x7}, [@nested={0xd4, 0x1e, [@typed={0x8, 0x29, @pid=r2}, @typed={0xc8, 0x81, @binary="16460cd3c81c8174c3259b333b52331810a407d7f2b29707ec006d85a621cef89c4e50819f37573bb3a77a3bec062eb3aecf2a579c0d0f7d5d5f18136f6e8d462edff007844a261975a8ab0c8e55b0db486543099227d1d938b91e2ccedb5d694e84066eecbf421023fcf2f6537b14e0e10470671dfdaef63af37709061b387bfbb329c97290fb546a69a31f8dafb3b8903671300206b1e406ff2479bc42ae68339c21987b497dadc4ed5cfa9b3dd85f1205b1da3e068eb2a76ab1562de6941d3d98ca7a"}]}, @typed={0x8, 0x89, @fd=r0}, @nested={0x44, 0x67, [@generic="32f4c9def880db5487c98680be899993332181262c194c1d8a251494c1949e25873d17bb1af697d364", @typed={0x14, 0x45, @ipv6=@mcast2}]}, @generic="a2d1bd35607fd89707fddd0b3dab87cc513e01eb9e2c01e0f0e668ab2a05924901d00e66e2ecd7f6b9a542910d01494826148f558c8339e005cf887accb317d02ea9ba8f863bde3a735e", @typed={0x8, 0x5f, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, 0x188}, 0x1, 0x0, 0x0, 0x81}, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) 00:34:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x25d, 0x2, 0xe04}, {0x4, 0x8, 0xa, 0xa1f}, {0x9, 0x0, 0x0, 0x8}, {0x1, 0x80, 0xbab8, 0x3}, {0x400, 0x1, 0x200, 0x401}, {0x7fff, 0x3, 0x80000000, 0x3}, {0x2, 0x505c, 0xff, 0x6}, {0x0, 0x2, 0x6b9, 0x9}]}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x100, 0x1) 00:34:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x4e20, @rand_addr=0x7}}) [ 615.679721] ? pm_runtime_init+0x459/0x560 [ 615.683967] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 615.689349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.694215] do_invalid_op+0x1b/0x20 [ 615.697963] invalid_op+0x14/0x20 [ 615.701428] RIP: 0010:__device_add_disk+0x1068/0x1360 [ 615.706629] Code: ff ff 48 89 df e8 68 9e 44 fe e9 cb f0 ff ff e8 de 9e 44 fe e9 85 f4 ff ff e8 64 3d 01 fe 0f 0b e9 54 fb ff ff e8 58 3d 01 fe <0f> 0b e9 cb fe ff ff 4c 89 f7 e8 b9 9e 44 fe e9 0e f1 ff ff e8 ff 00:34:04 executing program 0: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) [ 615.725544] RSP: 0018:ffff880194ff7880 EFLAGS: 00010246 [ 615.730923] RAX: 0000000000040000 RBX: ffff8801bddfc1c0 RCX: ffffc90001edc000 [ 615.738201] RDX: 0000000000040000 RSI: ffffffff837da728 RDI: 0000000000000005 [ 615.745526] RBP: ffff880194ff7a50 R08: ffff8801bf470200 R09: 1ffffffff12b43d5 [ 615.752806] R10: ffffed003b5e4732 R11: ffff8801daf23993 R12: 00000000fffffff4 [ 615.760084] R13: ffff880194ff7a28 R14: ffff8801bddfc730 R15: ffff8801bddfc1c4 [ 615.767937] ? __device_add_disk+0x1068/0x1360 [ 615.772548] ? blk_alloc_devt+0x2e0/0x2e0 [ 615.776709] ? vsnprintf+0x20d/0x1b60 [ 615.780540] ? pointer+0x990/0x990 [ 615.784093] ? __mutex_init+0x1f7/0x290 [ 615.788090] ? __ia32_sys_membarrier+0x150/0x150 [ 615.792871] ? sprintf+0xb0/0xe0 [ 615.796256] ? scnprintf+0x130/0x130 [ 615.799977] ? __lockdep_init_map+0x105/0x590 [ 615.804462] device_add_disk+0x22/0x30 [ 615.808370] loop_add+0x741/0xa30 [ 615.811833] ? loop_queue_rq+0x690/0x690 [ 615.815888] loop_control_ioctl+0x199/0x530 [ 615.820211] ? loop_add+0xa30/0xa30 [ 615.823846] ? arch_local_save_flags+0x40/0x40 [ 615.828431] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 615.833354] ? loop_add+0xa30/0xa30 [ 615.836972] do_vfs_ioctl+0x1de/0x1720 [ 615.840848] ? ioctl_preallocate+0x300/0x300 [ 615.845268] ? selinux_file_mprotect+0x620/0x620 [ 615.850028] ? __sb_end_write+0xd9/0x110 [ 615.854080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.859603] ? fput+0x130/0x1a0 [ 615.862871] ? do_syscall_64+0x9a/0x820 [ 615.866838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.872364] ? security_file_ioctl+0x94/0xc0 [ 615.876780] ksys_ioctl+0xa9/0xd0 [ 615.880223] __x64_sys_ioctl+0x73/0xb0 [ 615.884114] do_syscall_64+0x1b9/0x820 [ 615.888020] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 615.893387] ? syscall_return_slowpath+0x5e0/0x5e0 [ 615.898314] ? trace_hardirqs_on_caller+0x310/0x310 [ 615.903334] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 615.908341] ? recalc_sigpending_tsk+0x180/0x180 [ 615.913087] ? kasan_check_write+0x14/0x20 [ 615.917326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.922182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.927361] RIP: 0033:0x457679 [ 615.930539] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.949428] RSP: 002b:00007f31abd43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.957141] RAX: ffffffffffffffda RBX: 00007f31abd446d4 RCX: 0000000000457679 [ 615.964413] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 615.971670] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 615.978922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 615.986178] R13: 00000000004d04b0 R14: 00000000004c04e5 R15: 0000000000000031 [ 615.994649] Kernel Offset: disabled [ 615.998377] Rebooting in 86400 seconds..