0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.312245] ? setup_fault_attr+0x200/0x200 [ 620.312270] __should_failslab+0x115/0x180 [ 620.312289] should_failslab+0x5/0x10 [ 620.312303] kmem_cache_alloc+0x3f/0x370 [ 620.312323] __inet_hash_connect+0x71e/0xd10 [ 620.312343] ? inet6_lookup+0x280/0x280 [ 620.312361] ? inet_hash+0xa0/0xa0 [ 620.312389] dccp_v6_connect+0xd20/0x1920 [ 620.312414] ? dccp_v6_conn_request+0x1630/0x1630 [ 620.312428] ? __schedule+0x88f/0x2040 [ 620.312453] ? perf_trace_lock_acquire+0xef/0x530 [ 620.312477] __inet_stream_connect+0x7e4/0xe00 [ 620.312499] ? inet_dgram_connect+0x2d0/0x2d0 [ 620.312519] ? mark_held_locks+0xa6/0xf0 [ 620.312535] ? __local_bh_enable_ip+0x159/0x270 [ 620.312550] ? __inet_stream_connect+0xe00/0xe00 [ 620.312569] ? __inet_stream_connect+0xe00/0xe00 [ 620.312583] inet_stream_connect+0x53/0xa0 [ 620.312599] __sys_connect+0x265/0x2c0 [ 620.312611] ? __ia32_sys_accept+0xb0/0xb0 09:31:36 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @loopback}, 0x1c) [ 620.312625] ? wait_for_completion_io+0x10/0x10 [ 620.312645] ? vfs_write+0x393/0x540 [ 620.312664] ? fput+0x2b/0x190 [ 620.312681] ? ksys_write+0x1c8/0x2a0 [ 620.312702] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 620.312720] ? trace_hardirqs_off_caller+0x6e/0x210 09:31:36 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x8, 0x2, 0x0) 09:31:36 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x4, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:36 executing program 5: syz_emit_ethernet(0xae, &(0x7f0000000380)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x78, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x3b, 0x0, '\x00', [@pad1]}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/vlan/vlan0\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:36 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @loopback}, 0x1c) [ 620.312737] __x64_sys_connect+0x6f/0xb0 [ 620.312752] ? lockdep_hardirqs_on+0x3a8/0x5c0 09:31:36 executing program 4: ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000180)={0x6, 0x8}) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = dup2(r0, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000280)="7bc20dd6db5404eda4086264934e53acf8b7f02901139b3ce470d512efddcf6308f130e7bde8261bab0a8a45d640dd10254dde3337a9d904cf73cabb5066a51c32560aa0bef6201bc713feaeb94c8731ad0183ea5abed134b8b95271ade903125bd60641947ac3d3f38c3516755b3d3392e576e5a6560df4b53fb71919b2ce2f00cdb62877980a702eb63e859e66d0b240a6200f1344c9", 0x97, 0x4040080, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x19, @dev={0xfe, 0x80, '\x00', 0x16}, 0x400}, 0x1c) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async) sendmmsg(r3, &(0x7f0000000340), 0x0, 0x91) sendto$inet6(r2, &(0x7f00000000c0)="79869436275eb1", 0x7, 0x10, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @empty, 0xc6}, 0x1c) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="58000000d427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00030080007fdea88dcf09000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000000000", 0x58}], 0x1) [ 620.312767] do_syscall_64+0xf9/0x620 [ 620.312786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.312798] RIP: 0033:0x7f95f3b96eb9 [ 620.312812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:31:36 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000), 0x80800) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.312820] RSP: 002b:00007f95f24eb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 620.312834] RAX: ffffffffffffffda RBX: 00007f95f3caa030 RCX: 00007f95f3b96eb9 [ 620.312844] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 620.312853] RBP: 00007f95f24eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.312862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.312871] R13: 00007ffffb086f3f R14: 00007f95f24eb300 R15: 0000000000022000 [ 620.678112] FAULT_INJECTION: forcing a failure. [ 620.678112] name failslab, interval 1, probability 0, space 0, times 0 [ 620.678132] CPU: 1 PID: 2439 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 620.678140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.678145] Call Trace: [ 620.678166] dump_stack+0x1fc/0x2ef [ 620.678186] should_fail.cold+0xa/0xf [ 620.678218] ? setup_fault_attr+0x200/0x200 [ 620.678234] ? lock_acquire+0x170/0x3c0 [ 620.678256] __should_failslab+0x115/0x180 [ 620.678275] should_failslab+0x5/0x10 [ 620.678289] kmem_cache_alloc_node+0x245/0x3b0 09:31:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x9, 0x0, @loopback}, 0x1c) [ 620.678310] __alloc_skb+0x71/0x560 [ 620.678329] dccp_connect+0x206/0x650 [ 620.678348] dccp_v6_connect+0xdd8/0x1920 [ 620.678373] ? dccp_v6_conn_request+0x1630/0x1630 [ 620.678400] ? perf_trace_lock_acquire+0xef/0x530 [ 620.678423] __inet_stream_connect+0x7e4/0xe00 [ 620.678443] ? inet_dgram_connect+0x2d0/0x2d0 [ 620.678463] ? mark_held_locks+0xa6/0xf0 [ 620.678478] ? __local_bh_enable_ip+0x159/0x270 09:31:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) [ 620.678495] ? __inet_stream_connect+0xe00/0xe00 [ 620.678513] ? __inet_stream_connect+0xe00/0xe00 [ 620.678527] inet_stream_connect+0x53/0xa0 [ 620.678543] __sys_connect+0x265/0x2c0 [ 620.678556] ? __ia32_sys_accept+0xb0/0xb0 [ 620.678570] ? wait_for_completion_io+0x10/0x10 09:31:37 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000), 0x80800) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.678588] ? vfs_write+0x393/0x540 [ 620.678604] ? fput+0x2b/0x190 [ 620.678619] ? ksys_write+0x1c8/0x2a0 [ 620.678638] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 620.678654] ? trace_hardirqs_off_caller+0x6e/0x210 [ 620.678675] __x64_sys_connect+0x6f/0xb0 [ 620.678692] ? lockdep_hardirqs_on+0x3a8/0x5c0 09:31:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa, 0x0, @loopback}, 0x1c) [ 620.678708] do_syscall_64+0xf9/0x620 [ 620.678727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.678743] RIP: 0033:0x7f95f3b96eb9 [ 620.678759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.678767] RSP: 002b:00007f95f24eb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 09:31:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) [ 620.678782] RAX: ffffffffffffffda RBX: 00007f95f3caa030 RCX: 00007f95f3b96eb9 [ 620.678790] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 620.678798] RBP: 00007f95f24eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.678807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.678815] R13: 00007ffffb086f3f R14: 00007f95f24eb300 R15: 0000000000022000 [ 620.940950] FAULT_INJECTION: forcing a failure. [ 620.940950] name failslab, interval 1, probability 0, space 0, times 0 [ 620.940971] CPU: 1 PID: 2467 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 620.940981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.940986] Call Trace: [ 620.941007] dump_stack+0x1fc/0x2ef [ 620.941029] should_fail.cold+0xa/0xf [ 620.941049] ? setup_fault_attr+0x200/0x200 09:31:37 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x4, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 620.941066] ? lock_acquire+0x170/0x3c0 [ 620.941089] __should_failslab+0x115/0x180 [ 620.941107] should_failslab+0x5/0x10 [ 620.941123] kmem_cache_alloc_node_trace+0x244/0x3b0 09:31:37 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9, 0x2, 0x0) 09:31:37 executing program 5: syz_emit_ethernet(0xae, &(0x7f0000000380)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x78, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x3b, 0x0, '\x00', [@pad1]}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 64) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/vlan/vlan0\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async, rerun: 64) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe, 0x0, @loopback}, 0x1c) 09:31:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:37 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000), 0x80800) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.941144] __kmalloc_node_track_caller+0x38/0x70 [ 620.941164] __alloc_skb+0xae/0x560 [ 620.941184] dccp_connect+0x206/0x650 [ 620.941202] dccp_v6_connect+0xdd8/0x1920 [ 620.941228] ? dccp_v6_conn_request+0x1630/0x1630 [ 620.941258] ? perf_trace_lock_acquire+0xef/0x530 [ 620.941283] __inet_stream_connect+0x7e4/0xe00 [ 620.941304] ? inet_dgram_connect+0x2d0/0x2d0 09:31:37 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:37 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @loopback, 0x1000000}, 0xfffffffffffffdf6) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) [ 620.941325] ? mark_held_locks+0xa6/0xf0 09:31:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x58, 0x0, @loopback}, 0x1c) [ 620.941340] ? __local_bh_enable_ip+0x159/0x270 [ 620.941367] ? __inet_stream_connect+0xe00/0xe00 09:31:38 executing program 5: syz_emit_ethernet(0xae, &(0x7f0000000380)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x78, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@hopopts={0x3b, 0x0, '\x00', [@pad1]}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/vlan/vlan0\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 620.941387] ? __inet_stream_connect+0xe00/0xe00 09:31:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @loopback, 0x1000000}, 0xfffffffffffffdf6) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) [ 620.941402] inet_stream_connect+0x53/0xa0 [ 620.941419] __sys_connect+0x265/0x2c0 [ 620.941434] ? __ia32_sys_accept+0xb0/0xb0 [ 620.941449] ? wait_for_completion_io+0x10/0x10 [ 620.941468] ? vfs_write+0x393/0x540 [ 620.941484] ? fput+0x2b/0x190 [ 620.941500] ? ksys_write+0x1c8/0x2a0 [ 620.941521] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 620.941538] ? trace_hardirqs_off_caller+0x6e/0x210 [ 620.941555] __x64_sys_connect+0x6f/0xb0 [ 620.941570] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 620.941584] do_syscall_64+0xf9/0x620 09:31:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @loopback, 0x1000000}, 0xfffffffffffffdf6) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8800) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @loopback, 0x1000000}, 0xfffffffffffffdf6) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) [ 620.941604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.941616] RIP: 0033:0x7f95f3b96eb9 [ 620.941630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.941637] RSP: 002b:00007f95f24eb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 620.941652] RAX: ffffffffffffffda RBX: 00007f95f3caa030 RCX: 00007f95f3b96eb9 [ 620.941661] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 620.941669] RBP: 00007f95f24eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.941677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.941685] R13: 00007ffffb086f3f R14: 00007f95f24eb300 R15: 0000000000022000 [ 621.259224] FAULT_INJECTION: forcing a failure. [ 621.259224] name failslab, interval 1, probability 0, space 0, times 0 [ 621.259243] CPU: 1 PID: 2478 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 621.259252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.259258] Call Trace: [ 621.259277] dump_stack+0x1fc/0x2ef [ 621.259297] should_fail.cold+0xa/0xf [ 621.259316] ? setup_fault_attr+0x200/0x200 [ 621.259331] ? lock_acquire+0x170/0x3c0 [ 621.259354] __should_failslab+0x115/0x180 [ 621.259371] should_failslab+0x5/0x10 [ 621.259386] kmem_cache_alloc+0x277/0x370 [ 621.259403] skb_clone+0x151/0x3d0 [ 621.259420] dccp_connect+0x2f9/0x650 [ 621.259438] dccp_v6_connect+0xdd8/0x1920 [ 621.259464] ? dccp_v6_conn_request+0x1630/0x1630 [ 621.259493] ? perf_trace_lock_acquire+0xef/0x530 [ 621.259518] __inet_stream_connect+0x7e4/0xe00 [ 621.259540] ? inet_dgram_connect+0x2d0/0x2d0 [ 621.259561] ? mark_held_locks+0xa6/0xf0 [ 621.259575] ? __local_bh_enable_ip+0x159/0x270 [ 621.259591] ? __inet_stream_connect+0xe00/0xe00 [ 621.259608] ? __inet_stream_connect+0xe00/0xe00 [ 621.259622] inet_stream_connect+0x53/0xa0 [ 621.259638] __sys_connect+0x265/0x2c0 [ 621.259652] ? __ia32_sys_accept+0xb0/0xb0 [ 621.259666] ? wait_for_completion_io+0x10/0x10 [ 621.259684] ? vfs_write+0x393/0x540 [ 621.259700] ? fput+0x2b/0x190 [ 621.259715] ? ksys_write+0x1c8/0x2a0 [ 621.259735] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 621.259751] ? trace_hardirqs_off_caller+0x6e/0x210 [ 621.259768] __x64_sys_connect+0x6f/0xb0 [ 621.259782] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 621.259796] do_syscall_64+0xf9/0x620 [ 621.259819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.259831] RIP: 0033:0x7f95f3b96eb9 09:31:38 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 621.259845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 621.259854] RSP: 002b:00007f95f24eb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 621.259874] RAX: ffffffffffffffda RBX: 00007f95f3caa030 RCX: 00007f95f3b96eb9 [ 621.259884] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 621.259892] RBP: 00007f95f24eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.259901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.259910] R13: 00007ffffb086f3f R14: 00007f95f24eb300 R15: 0000000000022000 [ 625.478893] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.478976] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.721208] IPv6 header not found [ 626.742604] IPv6 header not found [ 626.991234] IPv6 header not found 09:31:38 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xa, 0x2, 0x0) 09:31:38 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:38 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x60, 0x0, @loopback}, 0x1c) 09:31:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x125002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0xce64}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @private=0xa010100}], 0x5c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) connect(r3, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80) 09:31:38 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc, 0x0, @loopback}, 0x1c) 09:31:38 executing program 5: syz_emit_ethernet(0xde, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400a89f0000000000000000000000000000000000ff02000000000049a8000000000000018c009004017fff000000000000000457382eeb4b6cd7cd2ce9d22d6642e54268cc0c76d23e1416abf7d1645df5379595632dcac5f75052787e43140000da79c897cef278d868cef8d5213af9cb42cdf3e6abb4ebe5563ddec2ee74d7f8a9c3ec741efe8c9a50f2928395c6dadb6e0327860faaeb0ef612c9e354fd351b3d7512c8c02ce5902bc6a956d6c295b8f3553b403dc8343e55a8eb484fe4a3b53c292eed2a0c72255fdb018c6d896c7f00ba080004ea873a"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1e, 0x6110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x125002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0xce64}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @private=0xa010100}], 0x5c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) connect(r3, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80) 09:31:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1f4, 0x0, @loopback}, 0x1c) 09:31:39 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x125002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0xce64}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @private=0xa010100}], 0x5c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async) connect(r3, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80) 09:31:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x300, 0x0, @loopback}, 0x1c) 09:31:39 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:39 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xb, 0x2, 0x0) 09:31:39 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3e8, 0x0, @loopback}, 0x1c) 09:31:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="a801000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1a8}}, 0x0) sendto$inet6(r3, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000080)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) 09:31:39 executing program 5: syz_emit_ethernet(0xde, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400a89f0000000000000000000000000000000000ff02000000000049a8000000000000018c009004017fff000000000000000457382eeb4b6cd7cd2ce9d22d6642e54268cc0c76d23e1416abf7d1645df5379595632dcac5f75052787e43140000da79c897cef278d868cef8d5213af9cb42cdf3e6abb4ebe5563ddec2ee74d7f8a9c3ec741efe8c9a50f2928395c6dadb6e0327860faaeb0ef612c9e354fd351b3d7512c8c02ce5902bc6a956d6c295b8f3553b403dc8343e55a8eb484fe4a3b53c292eed2a0c72255fdb018c6d896c7f00ba080004ea873a"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1e, 0x6110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (rerun: 64) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async, rerun: 64) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 64) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x500, 0x0, @loopback}, 0x1c) 09:31:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="a801000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1a8}}, 0x0) sendto$inet6(r3, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000080)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="a801000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1a8}}, 0x0) (async) sendto$inet6(r3, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000080)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) 09:31:40 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="a801000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1a8}}, 0x0) sendto$inet6(r3, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000080)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="a801000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1a8}}, 0x0) (async) sendto$inet6(r3, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000080)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) 09:31:40 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x600, 0x0, @loopback}, 0x1c) 09:31:40 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:40 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:40 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xc, 0x2, 0x0) 09:31:40 executing program 4: r0 = semget$private(0x0, 0x3, 0x408) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x4, 0x2800}, {0x0, 0x4, 0x800}], 0x2, &(0x7f0000000180)={r1, r2+10000000}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff8, @loopback}, 0x1c) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x8, 0x4, 0x7, 0x0, 0x0, 0x50c54, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280)}, 0xd821, 0x8, 0xb, 0x9, 0x74, 0x6, 0x200, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r4 = socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x8}, &(0x7f00000002c0)={0x9, 0x3, 0x8, 0xffff, 0x0, 0xfffffffeffffffff, 0x8002, 0x2}, &(0x7f0000000300)={0xffff, 0x81, 0x7ff, 0x1, 0x200, 0x6dcd, 0x6, 0x8}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:40 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x700, 0x0, @loopback}, 0x1c) 09:31:40 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:40 executing program 5: syz_emit_ethernet(0xde, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400a89f0000000000000000000000000000000000ff02000000000049a8000000000000018c009004017fff000000000000000457382eeb4b6cd7cd2ce9d22d6642e54268cc0c76d23e1416abf7d1645df5379595632dcac5f75052787e43140000da79c897cef278d868cef8d5213af9cb42cdf3e6abb4ebe5563ddec2ee74d7f8a9c3ec741efe8c9a50f2928395c6dadb6e0327860faaeb0ef612c9e354fd351b3d7512c8c02ce5902bc6a956d6c295b8f3553b403dc8343e55a8eb484fe4a3b53c292eed2a0c72255fdb018c6d896c7f00ba080004ea873a"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1e, 0x6110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0xde, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400a89f0000000000000000000000000000000000ff02000000000049a8000000000000018c009004017fff000000000000000457382eeb4b6cd7cd2ce9d22d6642e54268cc0c76d23e1416abf7d1645df5379595632dcac5f75052787e43140000da79c897cef278d868cef8d5213af9cb42cdf3e6abb4ebe5563ddec2ee74d7f8a9c3ec741efe8c9a50f2928395c6dadb6e0327860faaeb0ef612c9e354fd351b3d7512c8c02ce5902bc6a956d6c295b8f3553b403dc8343e55a8eb484fe4a3b53c292eed2a0c72255fdb018c6d896c7f00ba080004ea873a"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1e, 0x6110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:40 executing program 4: r0 = semget$private(0x0, 0x3, 0x408) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x4, 0x2800}, {0x0, 0x4, 0x800}], 0x2, &(0x7f0000000180)={r1, r2+10000000}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff8, @loopback}, 0x1c) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x8, 0x4, 0x7, 0x0, 0x0, 0x50c54, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280)}, 0xd821, 0x8, 0xb, 0x9, 0x74, 0x6, 0x200, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x8}, &(0x7f00000002c0)={0x9, 0x3, 0x8, 0xffff, 0x0, 0xfffffffeffffffff, 0x8002, 0x2}, &(0x7f0000000300)={0xffff, 0x81, 0x7ff, 0x1, 0x200, 0x6dcd, 0x6, 0x8}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:41 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x900, 0x0, @loopback}, 0x1c) 09:31:41 executing program 4: r0 = semget$private(0x0, 0x3, 0x408) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x4, 0x2800}, {0x0, 0x4, 0x800}], 0x2, &(0x7f0000000180)={r1, r2+10000000}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff8, @loopback}, 0x1c) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x8, 0x4, 0x7, 0x0, 0x0, 0x50c54, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280)}, 0xd821, 0x8, 0xb, 0x9, 0x74, 0x6, 0x200, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r4 = socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x8}, &(0x7f00000002c0)={0x9, 0x3, 0x8, 0xffff, 0x0, 0xfffffffeffffffff, 0x8002, 0x2}, &(0x7f0000000300)={0xffff, 0x81, 0x7ff, 0x1, 0x200, 0x6dcd, 0x6, 0x8}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) semget$private(0x0, 0x3, 0x408) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x4, 0x2800}, {0x0, 0x4, 0x800}], 0x2, &(0x7f0000000180)={r1, r2+10000000}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff8, @loopback}, 0x1c) (async) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x8, 0x4, 0x7, 0x0, 0x0, 0x50c54, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280)}, 0xd821, 0x8, 0xb, 0x9, 0x74, 0x6, 0x200, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x8}, &(0x7f00000002c0)={0x9, 0x3, 0x8, 0xffff, 0x0, 0xfffffffeffffffff, 0x8002, 0x2}, &(0x7f0000000300)={0xffff, 0x81, 0x7ff, 0x1, 0x200, 0x6dcd, 0x6, 0x8}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) 09:31:41 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbff037e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe000000000001fc0200"/149], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x14082) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz1\x00', {0x800, 0x5, 0x401, 0x1000}, 0x1c, [0x3, 0x9, 0x6, 0x5efd, 0x2, 0x2, 0x0, 0x1f, 0x7, 0xfffffff8, 0x80000001, 0xeac8, 0x3, 0x6, 0x3, 0xa38d, 0x3, 0xffffffff, 0x101, 0x6, 0x3, 0x1, 0x0, 0x80, 0x1, 0x5613, 0x3c, 0x6, 0x7ff, 0x0, 0x2, 0x6, 0x80000001, 0x3, 0x81, 0x6, 0x7, 0x6, 0x6, 0x4, 0x1, 0x50d, 0xfffffe01, 0x70, 0x2, 0x7, 0x9, 0x9, 0x4, 0x5, 0xdba5, 0x7f, 0x86, 0x10000, 0x9, 0x2, 0x3, 0x3f, 0x4, 0x7fffffff, 0xec3, 0x9, 0x7, 0xfa4], [0xff, 0x1ff, 0x1ff, 0x5, 0x80000001, 0x0, 0x9, 0x4, 0x7, 0x5a90, 0x4, 0x41d, 0x77, 0x0, 0x80, 0x5, 0x9, 0x8, 0xf4f2, 0x1, 0x1ff, 0x70000000, 0x54e, 0x4, 0xfffffffd, 0x3, 0x5, 0x0, 0x2, 0x5, 0x1, 0x100, 0xffff, 0x400, 0x8001, 0x76, 0x7ff, 0x6, 0x8, 0x3, 0x101, 0x3f, 0x1, 0x80, 0xff, 0x9, 0x6, 0xfffffffc, 0x7, 0x9, 0x0, 0x7, 0x7, 0x0, 0x7, 0x80000001, 0x3f, 0x38000, 0xaa9, 0x5, 0x8, 0x280, 0x0, 0x4], [0x7f, 0x400, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0xd1, 0x0, 0xff, 0x2, 0x1, 0x5, 0x10001, 0x8, 0x3, 0x0, 0x4, 0x3ff, 0x800, 0x8, 0x0, 0x1, 0x401, 0xfffffffb, 0xe7cc, 0x10000, 0x2, 0x10001, 0x7, 0x3, 0x8000, 0x401, 0x7ba3, 0x0, 0x8000, 0x9, 0x5, 0x6, 0xffff, 0x9, 0xfffffff8, 0x6, 0x7, 0xfff, 0x8000, 0x7fff, 0x5, 0x5, 0x3, 0x8, 0x1000, 0x1ff, 0x4, 0x3, 0x7, 0x6, 0x8, 0x8001, 0x9f93], [0x1000, 0x8, 0x9, 0x100, 0xfffffffc, 0x4, 0x7fffffff, 0x800, 0x9, 0xae, 0xd1c, 0x6, 0xf1b2, 0x1, 0x5, 0x2, 0x0, 0x7ff, 0x0, 0x80000001, 0x6, 0x100, 0x8, 0x101, 0x8, 0x8, 0x80, 0x1, 0x80000000, 0x10000, 0xfff, 0x8, 0x7, 0x8, 0xab4a, 0xa4, 0x96600000, 0xf08e, 0x2, 0x8, 0x7, 0x2, 0x5, 0xfffffffe, 0x1, 0x6, 0x6, 0x5, 0x7, 0x2, 0x6, 0x7, 0x357, 0xf18e47e9, 0x3, 0x0, 0x2, 0x6, 0xfffffe01, 0x7ff, 0x890, 0x7, 0x800, 0xfffffffc]}, 0x45c) accept4(r2, &(0x7f0000000040)=@tipc, &(0x7f0000000180)=0x80, 0x0) 09:31:41 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:41 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x0, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:41 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xd, 0x2, 0x0) 09:31:41 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa00, 0x0, @loopback}, 0x1c) 09:31:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x14082) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz1\x00', {0x800, 0x5, 0x401, 0x1000}, 0x1c, [0x3, 0x9, 0x6, 0x5efd, 0x2, 0x2, 0x0, 0x1f, 0x7, 0xfffffff8, 0x80000001, 0xeac8, 0x3, 0x6, 0x3, 0xa38d, 0x3, 0xffffffff, 0x101, 0x6, 0x3, 0x1, 0x0, 0x80, 0x1, 0x5613, 0x3c, 0x6, 0x7ff, 0x0, 0x2, 0x6, 0x80000001, 0x3, 0x81, 0x6, 0x7, 0x6, 0x6, 0x4, 0x1, 0x50d, 0xfffffe01, 0x70, 0x2, 0x7, 0x9, 0x9, 0x4, 0x5, 0xdba5, 0x7f, 0x86, 0x10000, 0x9, 0x2, 0x3, 0x3f, 0x4, 0x7fffffff, 0xec3, 0x9, 0x7, 0xfa4], [0xff, 0x1ff, 0x1ff, 0x5, 0x80000001, 0x0, 0x9, 0x4, 0x7, 0x5a90, 0x4, 0x41d, 0x77, 0x0, 0x80, 0x5, 0x9, 0x8, 0xf4f2, 0x1, 0x1ff, 0x70000000, 0x54e, 0x4, 0xfffffffd, 0x3, 0x5, 0x0, 0x2, 0x5, 0x1, 0x100, 0xffff, 0x400, 0x8001, 0x76, 0x7ff, 0x6, 0x8, 0x3, 0x101, 0x3f, 0x1, 0x80, 0xff, 0x9, 0x6, 0xfffffffc, 0x7, 0x9, 0x0, 0x7, 0x7, 0x0, 0x7, 0x80000001, 0x3f, 0x38000, 0xaa9, 0x5, 0x8, 0x280, 0x0, 0x4], [0x7f, 0x400, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0xd1, 0x0, 0xff, 0x2, 0x1, 0x5, 0x10001, 0x8, 0x3, 0x0, 0x4, 0x3ff, 0x800, 0x8, 0x0, 0x1, 0x401, 0xfffffffb, 0xe7cc, 0x10000, 0x2, 0x10001, 0x7, 0x3, 0x8000, 0x401, 0x7ba3, 0x0, 0x8000, 0x9, 0x5, 0x6, 0xffff, 0x9, 0xfffffff8, 0x6, 0x7, 0xfff, 0x8000, 0x7fff, 0x5, 0x5, 0x3, 0x8, 0x1000, 0x1ff, 0x4, 0x3, 0x7, 0x6, 0x8, 0x8001, 0x9f93], [0x1000, 0x8, 0x9, 0x100, 0xfffffffc, 0x4, 0x7fffffff, 0x800, 0x9, 0xae, 0xd1c, 0x6, 0xf1b2, 0x1, 0x5, 0x2, 0x0, 0x7ff, 0x0, 0x80000001, 0x6, 0x100, 0x8, 0x101, 0x8, 0x8, 0x80, 0x1, 0x80000000, 0x10000, 0xfff, 0x8, 0x7, 0x8, 0xab4a, 0xa4, 0x96600000, 0xf08e, 0x2, 0x8, 0x7, 0x2, 0x5, 0xfffffffe, 0x1, 0x6, 0x6, 0x5, 0x7, 0x2, 0x6, 0x7, 0x357, 0xf18e47e9, 0x3, 0x0, 0x2, 0x6, 0xfffffe01, 0x7ff, 0x890, 0x7, 0x800, 0xfffffffc]}, 0x45c) accept4(r2, &(0x7f0000000040)=@tipc, &(0x7f0000000180)=0x80, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x14082) (async) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz1\x00', {0x800, 0x5, 0x401, 0x1000}, 0x1c, [0x3, 0x9, 0x6, 0x5efd, 0x2, 0x2, 0x0, 0x1f, 0x7, 0xfffffff8, 0x80000001, 0xeac8, 0x3, 0x6, 0x3, 0xa38d, 0x3, 0xffffffff, 0x101, 0x6, 0x3, 0x1, 0x0, 0x80, 0x1, 0x5613, 0x3c, 0x6, 0x7ff, 0x0, 0x2, 0x6, 0x80000001, 0x3, 0x81, 0x6, 0x7, 0x6, 0x6, 0x4, 0x1, 0x50d, 0xfffffe01, 0x70, 0x2, 0x7, 0x9, 0x9, 0x4, 0x5, 0xdba5, 0x7f, 0x86, 0x10000, 0x9, 0x2, 0x3, 0x3f, 0x4, 0x7fffffff, 0xec3, 0x9, 0x7, 0xfa4], [0xff, 0x1ff, 0x1ff, 0x5, 0x80000001, 0x0, 0x9, 0x4, 0x7, 0x5a90, 0x4, 0x41d, 0x77, 0x0, 0x80, 0x5, 0x9, 0x8, 0xf4f2, 0x1, 0x1ff, 0x70000000, 0x54e, 0x4, 0xfffffffd, 0x3, 0x5, 0x0, 0x2, 0x5, 0x1, 0x100, 0xffff, 0x400, 0x8001, 0x76, 0x7ff, 0x6, 0x8, 0x3, 0x101, 0x3f, 0x1, 0x80, 0xff, 0x9, 0x6, 0xfffffffc, 0x7, 0x9, 0x0, 0x7, 0x7, 0x0, 0x7, 0x80000001, 0x3f, 0x38000, 0xaa9, 0x5, 0x8, 0x280, 0x0, 0x4], [0x7f, 0x400, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0xd1, 0x0, 0xff, 0x2, 0x1, 0x5, 0x10001, 0x8, 0x3, 0x0, 0x4, 0x3ff, 0x800, 0x8, 0x0, 0x1, 0x401, 0xfffffffb, 0xe7cc, 0x10000, 0x2, 0x10001, 0x7, 0x3, 0x8000, 0x401, 0x7ba3, 0x0, 0x8000, 0x9, 0x5, 0x6, 0xffff, 0x9, 0xfffffff8, 0x6, 0x7, 0xfff, 0x8000, 0x7fff, 0x5, 0x5, 0x3, 0x8, 0x1000, 0x1ff, 0x4, 0x3, 0x7, 0x6, 0x8, 0x8001, 0x9f93], [0x1000, 0x8, 0x9, 0x100, 0xfffffffc, 0x4, 0x7fffffff, 0x800, 0x9, 0xae, 0xd1c, 0x6, 0xf1b2, 0x1, 0x5, 0x2, 0x0, 0x7ff, 0x0, 0x80000001, 0x6, 0x100, 0x8, 0x101, 0x8, 0x8, 0x80, 0x1, 0x80000000, 0x10000, 0xfff, 0x8, 0x7, 0x8, 0xab4a, 0xa4, 0x96600000, 0xf08e, 0x2, 0x8, 0x7, 0x2, 0x5, 0xfffffffe, 0x1, 0x6, 0x6, 0x5, 0x7, 0x2, 0x6, 0x7, 0x357, 0xf18e47e9, 0x3, 0x0, 0x2, 0x6, 0xfffffe01, 0x7ff, 0x890, 0x7, 0x800, 0xfffffffc]}, 0x45c) (async) accept4(r2, &(0x7f0000000040)=@tipc, &(0x7f0000000180)=0x80, 0x0) (async) 09:31:41 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe00, 0x0, @loopback}, 0x1c) 09:31:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async, rerun: 64) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x14082) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz1\x00', {0x800, 0x5, 0x401, 0x1000}, 0x1c, [0x3, 0x9, 0x6, 0x5efd, 0x2, 0x2, 0x0, 0x1f, 0x7, 0xfffffff8, 0x80000001, 0xeac8, 0x3, 0x6, 0x3, 0xa38d, 0x3, 0xffffffff, 0x101, 0x6, 0x3, 0x1, 0x0, 0x80, 0x1, 0x5613, 0x3c, 0x6, 0x7ff, 0x0, 0x2, 0x6, 0x80000001, 0x3, 0x81, 0x6, 0x7, 0x6, 0x6, 0x4, 0x1, 0x50d, 0xfffffe01, 0x70, 0x2, 0x7, 0x9, 0x9, 0x4, 0x5, 0xdba5, 0x7f, 0x86, 0x10000, 0x9, 0x2, 0x3, 0x3f, 0x4, 0x7fffffff, 0xec3, 0x9, 0x7, 0xfa4], [0xff, 0x1ff, 0x1ff, 0x5, 0x80000001, 0x0, 0x9, 0x4, 0x7, 0x5a90, 0x4, 0x41d, 0x77, 0x0, 0x80, 0x5, 0x9, 0x8, 0xf4f2, 0x1, 0x1ff, 0x70000000, 0x54e, 0x4, 0xfffffffd, 0x3, 0x5, 0x0, 0x2, 0x5, 0x1, 0x100, 0xffff, 0x400, 0x8001, 0x76, 0x7ff, 0x6, 0x8, 0x3, 0x101, 0x3f, 0x1, 0x80, 0xff, 0x9, 0x6, 0xfffffffc, 0x7, 0x9, 0x0, 0x7, 0x7, 0x0, 0x7, 0x80000001, 0x3f, 0x38000, 0xaa9, 0x5, 0x8, 0x280, 0x0, 0x4], [0x7f, 0x400, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0xd1, 0x0, 0xff, 0x2, 0x1, 0x5, 0x10001, 0x8, 0x3, 0x0, 0x4, 0x3ff, 0x800, 0x8, 0x0, 0x1, 0x401, 0xfffffffb, 0xe7cc, 0x10000, 0x2, 0x10001, 0x7, 0x3, 0x8000, 0x401, 0x7ba3, 0x0, 0x8000, 0x9, 0x5, 0x6, 0xffff, 0x9, 0xfffffff8, 0x6, 0x7, 0xfff, 0x8000, 0x7fff, 0x5, 0x5, 0x3, 0x8, 0x1000, 0x1ff, 0x4, 0x3, 0x7, 0x6, 0x8, 0x8001, 0x9f93], [0x1000, 0x8, 0x9, 0x100, 0xfffffffc, 0x4, 0x7fffffff, 0x800, 0x9, 0xae, 0xd1c, 0x6, 0xf1b2, 0x1, 0x5, 0x2, 0x0, 0x7ff, 0x0, 0x80000001, 0x6, 0x100, 0x8, 0x101, 0x8, 0x8, 0x80, 0x1, 0x80000000, 0x10000, 0xfff, 0x8, 0x7, 0x8, 0xab4a, 0xa4, 0x96600000, 0xf08e, 0x2, 0x8, 0x7, 0x2, 0x5, 0xfffffffe, 0x1, 0x6, 0x6, 0x5, 0x7, 0x2, 0x6, 0x7, 0x357, 0xf18e47e9, 0x3, 0x0, 0x2, 0x6, 0xfffffe01, 0x7ff, 0x890, 0x7, 0x800, 0xfffffffc]}, 0x45c) (async) accept4(r2, &(0x7f0000000040)=@tipc, &(0x7f0000000180)=0x80, 0x0) 09:31:42 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbff037e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe000000000001fc0200"/149], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (rerun: 32) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async, rerun: 32) r2 = socket$inet6(0xa, 0x6, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async, rerun: 64) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 64) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:42 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x0, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:42 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0x0, @loopback}, 0x1c) 09:31:42 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xe, 0x2, 0x0) 09:31:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 09:31:43 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:43 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback}, 0x1c) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) sendto$inet6(r0, &(0x7f0000000180)="0f2d4e59aaca6fea079b0f4a163369d93427a48e413f7ba18cd5056bb456cc636e7faca480e2fe3a75dfabd9521595345d9fe11213f2396f63176d33fc5e6166659af370c87eec90a9b27625aa315f05bc42e4982e2c9883c86b90cf8d5b5b56108c33b2f9856ee74eb8883b50be1271b97620a10fb5206c623f7da4421c8b5ed98bc7e58cdcc7123823ee7715e2249631b1403d79ea7d3cfae8b41ee328d626bb28a9718ba0dd7def3ccc55dd51e2816c549500fa1cf45bf85ff94dd8c1be25d154121bba6e424aefd980f31ddc26df8b0f016a8280c50ffdbddaa7", 0xdc, 0x24044040, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @empty}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) sendto$inet6(r2, &(0x7f0000000280)="f9d27f650df9c7f6732b308a4ebd06243624c8adceb58e37cef59b3dcb3ec8a3daaf9db6533b368b86e3435f64c2efd8a758973f254197aa2ac8bf4f9ccb7849b7ec32e0fc6b2363e248b07e31cfd05d98a74d970048fb48b724198c12b6abc39d06c81d2c84e1cf3357acbbaf0d51e468e402c6bc", 0x75, 0x400c880, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x3ff}, 0x1c) ftruncate(r0, 0x0) 09:31:43 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:43 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbff037e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe000000000001fc0200"/149], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbff037e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe000000000001fc0200"/149], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:43 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x0, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) sendto$inet6(r0, &(0x7f0000000180)="0f2d4e59aaca6fea079b0f4a163369d93427a48e413f7ba18cd5056bb456cc636e7faca480e2fe3a75dfabd9521595345d9fe11213f2396f63176d33fc5e6166659af370c87eec90a9b27625aa315f05bc42e4982e2c9883c86b90cf8d5b5b56108c33b2f9856ee74eb8883b50be1271b97620a10fb5206c623f7da4421c8b5ed98bc7e58cdcc7123823ee7715e2249631b1403d79ea7d3cfae8b41ee328d626bb28a9718ba0dd7def3ccc55dd51e2816c549500fa1cf45bf85ff94dd8c1be25d154121bba6e424aefd980f31ddc26df8b0f016a8280c50ffdbddaa7", 0xdc, 0x24044040, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @empty}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) sendto$inet6(r2, &(0x7f0000000280)="f9d27f650df9c7f6732b308a4ebd06243624c8adceb58e37cef59b3dcb3ec8a3daaf9db6533b368b86e3435f64c2efd8a758973f254197aa2ac8bf4f9ccb7849b7ec32e0fc6b2363e248b07e31cfd05d98a74d970048fb48b724198c12b6abc39d06c81d2c84e1cf3357acbbaf0d51e468e402c6bc", 0x75, 0x400c880, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x3ff}, 0x1c) ftruncate(r0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) sendto$inet6(r0, &(0x7f0000000180)="0f2d4e59aaca6fea079b0f4a163369d93427a48e413f7ba18cd5056bb456cc636e7faca480e2fe3a75dfabd9521595345d9fe11213f2396f63176d33fc5e6166659af370c87eec90a9b27625aa315f05bc42e4982e2c9883c86b90cf8d5b5b56108c33b2f9856ee74eb8883b50be1271b97620a10fb5206c623f7da4421c8b5ed98bc7e58cdcc7123823ee7715e2249631b1403d79ea7d3cfae8b41ee328d626bb28a9718ba0dd7def3ccc55dd51e2816c549500fa1cf45bf85ff94dd8c1be25d154121bba6e424aefd980f31ddc26df8b0f016a8280c50ffdbddaa7", 0xdc, 0x24044040, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @empty}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000280)="f9d27f650df9c7f6732b308a4ebd06243624c8adceb58e37cef59b3dcb3ec8a3daaf9db6533b368b86e3435f64c2efd8a758973f254197aa2ac8bf4f9ccb7849b7ec32e0fc6b2363e248b07e31cfd05d98a74d970048fb48b724198c12b6abc39d06c81d2c84e1cf3357acbbaf0d51e468e402c6bc", 0x75, 0x400c880, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x3ff}, 0x1c) (async) ftruncate(r0, 0x0) (async) 09:31:43 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6000, 0x0, @loopback}, 0x1c) 09:31:44 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x1}, {0x0, 0x400}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:44 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:44 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf, 0x2, 0x0) 09:31:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) sendto$inet6(r0, &(0x7f0000000180)="0f2d4e59aaca6fea079b0f4a163369d93427a48e413f7ba18cd5056bb456cc636e7faca480e2fe3a75dfabd9521595345d9fe11213f2396f63176d33fc5e6166659af370c87eec90a9b27625aa315f05bc42e4982e2c9883c86b90cf8d5b5b56108c33b2f9856ee74eb8883b50be1271b97620a10fb5206c623f7da4421c8b5ed98bc7e58cdcc7123823ee7715e2249631b1403d79ea7d3cfae8b41ee328d626bb28a9718ba0dd7def3ccc55dd51e2816c549500fa1cf45bf85ff94dd8c1be25d154121bba6e424aefd980f31ddc26df8b0f016a8280c50ffdbddaa7", 0xdc, 0x24044040, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @empty}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) sendto$inet6(r2, &(0x7f0000000280)="f9d27f650df9c7f6732b308a4ebd06243624c8adceb58e37cef59b3dcb3ec8a3daaf9db6533b368b86e3435f64c2efd8a758973f254197aa2ac8bf4f9ccb7849b7ec32e0fc6b2363e248b07e31cfd05d98a74d970048fb48b724198c12b6abc39d06c81d2c84e1cf3357acbbaf0d51e468e402c6bc", 0x75, 0x400c880, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x3ff}, 0x1c) ftruncate(r0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) sendto$inet6(r0, &(0x7f0000000180)="0f2d4e59aaca6fea079b0f4a163369d93427a48e413f7ba18cd5056bb456cc636e7faca480e2fe3a75dfabd9521595345d9fe11213f2396f63176d33fc5e6166659af370c87eec90a9b27625aa315f05bc42e4982e2c9883c86b90cf8d5b5b56108c33b2f9856ee74eb8883b50be1271b97620a10fb5206c623f7da4421c8b5ed98bc7e58cdcc7123823ee7715e2249631b1403d79ea7d3cfae8b41ee328d626bb28a9718ba0dd7def3ccc55dd51e2816c549500fa1cf45bf85ff94dd8c1be25d154121bba6e424aefd980f31ddc26df8b0f016a8280c50ffdbddaa7", 0xdc, 0x24044040, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @empty}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000280)="f9d27f650df9c7f6732b308a4ebd06243624c8adceb58e37cef59b3dcb3ec8a3daaf9db6533b368b86e3435f64c2efd8a758973f254197aa2ac8bf4f9ccb7849b7ec32e0fc6b2363e248b07e31cfd05d98a74d970048fb48b724198c12b6abc39d06c81d2c84e1cf3357acbbaf0d51e468e402c6bc", 0x75, 0x400c880, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x3ff}, 0x1c) (async) ftruncate(r0, 0x0) (async) 09:31:44 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x80fe, 0x0, @loopback}, 0x1c) 09:31:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:44 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:44 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xc0fe, 0x0, @loopback}, 0x1c) 09:31:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:44 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast2, 0x1}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) 09:31:45 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe803, 0x0, @loopback}, 0x1c) 09:31:45 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x1}, {0x0, 0x400}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r0, 0x400000001ffffffd) (async, rerun: 64) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async, rerun: 32) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 32) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:45 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:45 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10, 0x2, 0x0) 09:31:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2, 0x80, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b000900800089000001e809000000ff0007674120100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:45 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:45 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xf401, 0x0, @loopback}, 0x1c) 09:31:45 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:45 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x1}, {0x0, 0x400}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{0x0, 0x1}, {0x0, 0x400}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:45 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc00, 0x0, @loopback}, 0x1c) 09:31:45 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2, 0x80, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b000900800089000001e809000000ff0007674120100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2, 0x80, 0x0}}], 0x1, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b000900800089000001e809000000ff0007674120100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) 09:31:45 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000007e9de287189a86dd60c7d50400683a0100000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f0000001b00000000000000000000000001fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000340), 0x4) 09:31:46 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:46 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfe80, 0x0, @loopback}, 0x1c) 09:31:46 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x11, 0x2, 0x0) 09:31:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2, 0x80, 0x0}}], 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b000900800089000001e809000000ff0007674120100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2, 0x80, 0x0}}], 0x1, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b000900800089000001e809000000ff0007674120100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) 09:31:46 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:46 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfec0, 0x0, @loopback}, 0x1c) 09:31:46 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:46 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x68, 0x48, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x52}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d810}, 0x400) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000580)="ae13a7832b05e25b1931ac7046f89e932c44e9fb8624944f9ea7e777774ad424287ac8fe329afc777784f5d464181d9e087227d75ba8867ea4d09f0edfe8a53c5567f1319abdc2ce40ba731295febaf8e6791fdb7b3eabfc41f5a4614fcf4613fe5fb3643ff3c99a22d8fa74cb378c2ef5b7d3a46b9d89e998f68602f57e239b85652b8db5c6f4aa41537ace04e8b51da9", 0x91) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x10000007, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd92}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x0, 0x0, 0x6, 0xb620, 0x53bd}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x1, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0x3}, {0xfff3, 0x7}, {0xfff1, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 09:31:46 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff00, 0x0, @loopback}, 0x1c) 09:31:46 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000007e9de287189a86dd60c7d50400683a0100000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f0000001b00000000000000000000000001fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000340), 0x4) 09:31:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x68, 0x48, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x52}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d810}, 0x400) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000580)="ae13a7832b05e25b1931ac7046f89e932c44e9fb8624944f9ea7e777774ad424287ac8fe329afc777784f5d464181d9e087227d75ba8867ea4d09f0edfe8a53c5567f1319abdc2ce40ba731295febaf8e6791fdb7b3eabfc41f5a4614fcf4613fe5fb3643ff3c99a22d8fa74cb378c2ef5b7d3a46b9d89e998f68602f57e239b85652b8db5c6f4aa41537ace04e8b51da9", 0x91) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x10000007, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd92}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x0, 0x0, 0x6, 0xb620, 0x53bd}, 0x20) (async, rerun: 32) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x1, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0x3}, {0xfff3, 0x7}, {0xfff1, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 09:31:46 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:47 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:31:47 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x12, 0x2, 0x0) 09:31:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x68, 0x48, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x52}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d810}, 0x400) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async, rerun: 32) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000580)="ae13a7832b05e25b1931ac7046f89e932c44e9fb8624944f9ea7e777774ad424287ac8fe329afc777784f5d464181d9e087227d75ba8867ea4d09f0edfe8a53c5567f1319abdc2ce40ba731295febaf8e6791fdb7b3eabfc41f5a4614fcf4613fe5fb3643ff3c99a22d8fa74cb378c2ef5b7d3a46b9d89e998f68602f57e239b85652b8db5c6f4aa41537ace04e8b51da9", 0x91) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x10000007, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd92}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x0, 0x0, 0x6, 0xb620, 0x53bd}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) socket$inet6(0xa, 0x1, 0x400) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6, 0x3}, {0xfff3, 0x7}, {0xfff1, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 09:31:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:47 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback}, 0x1c) 09:31:47 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x5, 0x61, @mcast2, @mcast2, 0x8, 0x700, 0x3, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x8, 0x8, 0x4, 0x7f, 0x3, 0xbb, 0x7c, 0xff, 0x0, 0x7, 0x6}, 0xe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:47 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) 09:31:47 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000007e9de287189a86dd60c7d50400683a0100000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f0000001b00000000000000000000000001fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000340), 0x4) 09:31:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x5, 0x61, @mcast2, @mcast2, 0x8, 0x700, 0x3, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x8, 0x8, 0x4, 0x7f, 0x3, 0xbb, 0x7c, 0xff, 0x0, 0x7, 0x6}, 0xe) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x5, 0x61, @mcast2, @mcast2, 0x8, 0x700, 0x3, 0x1}}) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x8, 0x8, 0x4, 0x7f, 0x3, 0xbb, 0x7c, 0xff, 0x0, 0x7, 0x6}, 0xe) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8}, 0x1c) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (async) 09:31:47 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @loopback}, 0x1c) 09:31:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:48 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x13, 0x2, 0x0) 09:31:48 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @loopback}, 0x1c) 09:31:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x5, 0x61, @mcast2, @mcast2, 0x8, 0x700, 0x3, 0x1}}) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x1a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x178, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0xb, 0x2, "093dcaade1e4ed"}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x5, 0x2c, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0xfff, 0x1, 0x3, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x59, 0xd66, 0x100, 0xa70}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x8, 0x7, 0xfffffffc, 0x51a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x81, 0x1624}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xffffffff, 0x10000, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x4, 0x1, 0x7, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x6, 0x7, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x2, 0x7, 0x7e, 0x7ff}}]}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x4, 0x9, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1f, 0x40, 0x6, 0x5, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0x6, 0x4, 0xd8e}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x1a8}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x8, 0x8, 0x4, 0x7f, 0x3, 0xbb, 0x7c, 0xff, 0x0, 0x7, 0x6}, 0xe) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa8}, 0x1c) (async, rerun: 32) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) (rerun: 32) 09:31:48 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:48 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:48 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback}, 0x1c) 09:31:48 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:48 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x2, 0xae}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:48 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback}, 0x1c) 09:31:48 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:48 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x14, 0x2, 0x0) 09:31:49 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @loopback}, 0x1c) 09:31:49 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:49 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback}, 0x1c) 09:31:49 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa, @loopback}, 0x1c) 09:31:49 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x2, 0xae}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 32) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:49 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x15, 0x2, 0x0) 09:31:49 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:49 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @loopback}, 0x1c) 09:31:49 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x2, 0xae}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2}, {0x2, 0xae}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:50 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:50 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x58, @loopback}, 0x1c) 09:31:50 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x60, @loopback}, 0x1c) 09:31:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:50 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:50 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x16, 0x2, 0x0) 09:31:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc, @loopback}, 0x1c) 09:31:50 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:50 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:51 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:51 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1f4, @loopback}, 0x1c) 09:31:51 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:51 executing program 4: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:51 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:51 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:51 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:51 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x300, @loopback}, 0x1c) 09:31:51 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x17, 0x2, 0x0) 09:31:51 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:51 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3e8, @loopback}, 0x1c) 09:31:51 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5aa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) r0 = socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:52 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:52 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @loopback}, 0x1c) 09:31:52 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:52 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:52 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x600, @loopback}, 0x1c) 09:31:52 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @private0, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:52 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd62c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010200907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:52 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x18, 0x2, 0x0) 09:31:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:52 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x700, @loopback}, 0x1c) 09:31:52 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:53 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:53 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x900, @loopback}, 0x1c) 09:31:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400add427323b472545b4560a117fffffffa1000e220e225f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff0e0000000000e8ee00000000000000000200000000", 0x58}], 0x1) 09:31:53 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) 09:31:53 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @loopback}, 0x1c) 09:31:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x9}, 0x1c) 09:31:53 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd62c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010200907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000"], 0x0) (async, rerun: 64) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (rerun: 32) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async, rerun: 32) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 32) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:53 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe00, @loopback}, 0x1c) 09:31:53 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x19, 0x2, 0x0) 09:31:53 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r3, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:54 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:54 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000, @loopback}, 0x1c) 09:31:54 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:54 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:54 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000, @loopback}, 0x1c) 09:31:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:54 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd62c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010200907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:54 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:54 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5800, @loopback}, 0x1c) 09:31:54 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1a, 0x2, 0x0) 09:31:54 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:55 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:55 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000, @loopback}, 0x1c) 09:31:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="c8ba84b4e8d2e1", @ANYRES16], 0x19c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:55 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe, @loopback}, 0x1c) 09:31:55 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff02000000000100000000000000000101e2907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:55 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1b, 0x2, 0x0) 09:31:55 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe, @loopback}, 0x1c) 09:31:55 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:55 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe803, @loopback}, 0x1c) 09:31:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:56 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf401, @loopback}, 0x1c) 09:31:56 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff02000000000100000000000000000101e2907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff02000000000100000000000000000101e2907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:56 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:56 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1c, 0x2, 0x0) 09:31:56 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:56 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:56 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:56 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc00, @loopback}, 0x1c) 09:31:56 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff02000000000100000000000000000101e2907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:56 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:57 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:57 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe80, @loopback}, 0x1c) 09:31:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:57 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:57 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1d, 0x2, 0x0) 09:31:57 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:57 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:57 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec0, @loopback}, 0x1c) 09:31:57 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:57 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:57 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608800000000000000000000000000fe8000000000000000000000000000aa0006040301000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000007d7d42e918eb8a3c2be38e4215eda23e3611828ecb36956cd88a57d38b50432dc63144684027743697b8641bdd43611b31789a5ebbd4452f7f149bbe83ef60d65dbcdbd2c1f66c1d8be4d7"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x6, 0xffff, 0x1, 0x2, 0x400}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:57 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:57 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:57 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff00, @loopback}, 0x1c) 09:31:57 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:58 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:58 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1e, 0x2, 0x0) 09:31:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:58 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:58 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) 09:31:58 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:58 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608800000000000000000000000000fe8000000000000000000000000000aa0006040301000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000007d7d42e918eb8a3c2be38e4215eda23e3611828ecb36956cd88a57d38b50432dc63144684027743697b8641bdd43611b31789a5ebbd4452f7f149bbe83ef60d65dbcdbd2c1f66c1d8be4d7"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x6, 0xffff, 0x1, 0x2, 0x400}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608800000000000000000000000000fe8000000000000000000000000000aa0006040301000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000007d7d42e918eb8a3c2be38e4215eda23e3611828ecb36956cd88a57d38b50432dc63144684027743697b8641bdd43611b31789a5ebbd4452f7f149bbe83ef60d65dbcdbd2c1f66c1d8be4d7"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x6, 0xffff, 0x1, 0x2, 0x400}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:58 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) 09:31:58 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:58 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608800000000000000000000000000fe8000000000000000000000000000aa0006040301000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000007d7d42e918eb8a3c2be38e4215eda23e3611828ecb36956cd88a57d38b50432dc63144684027743697b8641bdd43611b31789a5ebbd4452f7f149bbe83ef60d65dbcdbd2c1f66c1d8be4d7"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x6, 0xffff, 0x1, 0x2, 0x400}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608800000000000000000000000000fe8000000000000000000000000000aa0006040301000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000007d7d42e918eb8a3c2be38e4215eda23e3611828ecb36956cd88a57d38b50432dc63144684027743697b8641bdd43611b31789a5ebbd4452f7f149bbe83ef60d65dbcdbd2c1f66c1d8be4d7"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x6, 0xffff, 0x1, 0x2, 0x400}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:31:59 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x21, 0x2, 0x0) 09:31:59 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:59 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:59 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) 09:31:59 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:31:59 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:31:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:31:59 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) 09:31:59 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80800) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:31:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:32:00 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x22, 0x2, 0x0) 09:32:00 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80800) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:00 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000, @loopback}, 0x1c) 09:32:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:32:00 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:00 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80800) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:00 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r0, 0x400000001ffffffd) (async, rerun: 32) r2 = socket$inet6(0xa, 0x6, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:32:00 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:32:00 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000000, @loopback}, 0x1c) 09:32:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:32:00 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:00 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x23, 0x2, 0x0) 09:32:00 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:32:00 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:00 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7000000, @loopback}, 0x1c) 09:32:01 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:01 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="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"/400], 0x1a8}}, 0x0) 09:32:01 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @loopback}, 0x1c) 09:32:01 executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:32:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:01 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9000000, @loopback}, 0x1c) 09:32:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 09:32:01 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x24, 0x2, 0x0) 09:32:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 09:32:01 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa000000, @loopback}, 0x1c) 09:32:01 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:02 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:02 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:32:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 09:32:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:02 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe000000, @loopback}, 0x1c) 09:32:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 09:32:02 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20000000, @loopback}, 0x1c) 09:32:02 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x25, 0x2, 0x0) 09:32:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 09:32:02 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:02 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:02 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) 09:32:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0xe27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, 0x0, 0x0, 0x9, 0x0, "6cdccfe6ce962f0e4d1de506a7ae7f7cf1200aec84f95c9d69b959e8eec3a166ba98792f8896649a66ae71275553f0cfaa40089f97cf7f789cebbd7a6295c3253af64b9db04b58e6fb1043e6cad31581"}, 0xd8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 09:32:03 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:03 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x58000000, @loopback}, 0x1c) 09:32:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1a8}}, 0x0) 09:32:03 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:03 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x60000000, @loopback}, 0x1c) 09:32:03 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x26, 0x2, 0x0) 09:32:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1a8}}, 0x0) 09:32:03 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:03 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8aaaffff, @loopback}, 0x1c) 09:32:03 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:03 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:04 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8dffffff, @loopback}, 0x1c) 09:32:04 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1a8}}, 0x0) 09:32:04 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="ac38aeed6b349152fd88ee5fa8b4aae60dc7866fef1b49ae0e2edcb90fac4e3f244a9e67ebff487908129647a28a524fe30ef8c695f44da5be157dbf350bbe9d39e38d5d6883026e5d1ce068adc65d66603ea43dc71a99902f4dfc39472d928ca878fd11a588f796552da36d17cadfd7d73e22ff1b6c0bbb6a4bd20ecd4647daf51da745633316803dbaca9113c6c82d201373", 0x93, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2], 0x1a8}}, 0x0) 09:32:04 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe8030000, @loopback}, 0x1c) [ 653.206853] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:04 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x27, 0x2, 0x0) 09:32:04 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2], 0x1a8}}, 0x0) 09:32:04 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf4010000, @loopback}, 0x1c) 09:32:04 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 653.724624] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2], 0x1a8}}, 0x0) 09:32:04 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async, rerun: 64) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 64) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:04 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:04 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5ffffff, @loopback}, 0x1c) [ 653.946815] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:05 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c) 09:32:05 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.121186] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:05 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x28, 0x2, 0x0) 09:32:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:05 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:05 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c) 09:32:05 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 654.685895] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:05 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:05 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x900040}, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:05 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec00000, @loopback}, 0x1c) 09:32:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff0000010007000000"], 0x1a8}}, 0x0) [ 654.934638] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:06 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:06 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff000000, @loopback}, 0x1c) [ 655.122893] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:06 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x29, 0x2, 0x0) 09:32:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:06 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffaa8a, @loopback}, 0x1c) 09:32:06 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:06 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:06 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) [ 655.636315] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:06 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff8d, @loopback}, 0x1c) 09:32:06 executing program 1: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8dffffff, @loopback}, 0x1c) [ 655.840931] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:07 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:32:07 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5, @loopback}, 0x1c) [ 655.991088] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:07 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2a, 0x2, 0x0) 09:32:07 executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000"], 0x1a8}}, 0x0) 09:32:07 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) 09:32:07 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:07 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0xffffffaf, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r0, &(0x7f000001cd80)=""/102394, 0x18ffa, 0x3) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:07 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 09:32:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:07 executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:08 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c) 09:32:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB], 0x1a8}}, 0x0) 09:32:08 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2b, 0x2, 0x0) 09:32:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:08 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5}}, 0x1c) 09:32:08 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0xffffffaf, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r0, &(0x7f000001cd80)=""/102394, 0x18ffa, 0x3) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:08 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:08 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6}}, 0x1c) 09:32:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc00058014000200010000"], 0x1a8}}, 0x0) 09:32:09 executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:09 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7}}, 0x1c) 09:32:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:09 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2c, 0x2, 0x0) 09:32:09 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8}}, 0x1c) 09:32:09 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0xffffffaf, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r0, &(0x7f000001cd80)=""/102394, 0x18ffa, 0x3) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 658.396090] nla_parse: 9 callbacks suppressed [ 658.396102] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:09 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x0, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/50], 0x1a8}}, 0x0) 09:32:09 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x9}}, 0x1c) 09:32:09 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 658.573454] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed"], 0x1a8}}, 0x0) [ 658.742492] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:10 executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:10 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xa}}, 0x1c) 09:32:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) 09:32:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) [ 658.972569] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 659.080305] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:10 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2d, 0x2, 0x0) 09:32:10 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe}}, 0x1c) 09:32:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) [ 659.296468] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:10 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x0, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00020009"], 0x1a8}}, 0x0) 09:32:10 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x58}}, 0x1c) 09:32:10 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 659.479136] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:10 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x60}}, 0x1c) 09:32:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200093dcaade1e4ed00cc0005801400020001000000050000002c00000007000000180001007f000000ff0f0000010000000300000081000000180001000000000059000000660d000000010000700a000018000100ff0000000800000007000000fcffffff1a05000014000200040000000600000081000000241600001400020005000000ffffffff000001000700000018000100800000000400000001000000070000000800000014000200ffff0000060000000700000003000000180001000500000002000000070000007e000000ff0700004c000580180001000000000004000000040000000900000081000000180001001f000000400000000600000005000000ffffff7f1800010003000000ff00000006000000040000008e0d00000c000a0000040000000000002c000c00"/400], 0x1a8}}, 0x0) 09:32:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) 09:32:10 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe800000000000000e000000000000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200000000000000000000000000009700f4966715a89891582b40ea8a9ddc9576c7437bd70eb84648943f7469be30d3b91498be4f40a0300cc320d6a10a24823b5a0b5df0120722a04562fe4ab08b863341934756fd87599d2821553b605157ab4e3095eabff2c44ec1ffda8788269950e4beb89c8ed22e98a7159ccc2dc1b8620ca1c2fa8b728535acd0845589d2f0712ba7d0403d5b751bd1e786537a941a0b4a7a39727dbd264c4085c6bb10fb9e0a17811fb86f2aaa5ed0cfb5cfee1fd3e2d4c1ae769596615822728ff7a7f16fc4129c233977ce94ba0e5d32c3236264d5d356b94b10232f2046d4633bfa59d9a8515d"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:10 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c) [ 659.906062] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:11 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 1) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:11 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2e, 0x2, 0x0) 09:32:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) [ 660.177701] FAULT_INJECTION: forcing a failure. [ 660.177701] name failslab, interval 1, probability 0, space 0, times 0 [ 660.197707] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 660.202967] CPU: 0 PID: 5403 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 660.214234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.223607] Call Trace: [ 660.226208] dump_stack+0x1fc/0x2ef [ 660.229860] should_fail.cold+0xa/0xf [ 660.233673] ? setup_fault_attr+0x200/0x200 [ 660.238022] ? lock_acquire+0x170/0x3c0 [ 660.242051] __should_failslab+0x115/0x180 [ 660.246301] should_failslab+0x5/0x10 [ 660.250113] kmem_cache_alloc_trace+0x284/0x380 [ 660.254789] ? loop_queue_work+0x20c0/0x20c0 [ 660.259212] loop_add+0x4e/0x8a0 [ 660.262620] loop_control_ioctl+0x16c/0x480 [ 660.266993] ? loop_lookup+0x1d0/0x1d0 [ 660.270921] ? HARDIRQ_verbose+0x10/0x10 [ 660.275013] ? loop_lookup+0x1d0/0x1d0 [ 660.278912] do_vfs_ioctl+0xcdb/0x12e0 [ 660.282828] ? lock_downgrade+0x720/0x720 [ 660.286993] ? check_preemption_disabled+0x41/0x280 [ 660.292030] ? ioctl_preallocate+0x200/0x200 [ 660.296460] ? __fget+0x356/0x510 [ 660.299922] ? do_dup2+0x450/0x450 [ 660.303461] ? vfs_write+0x393/0x540 [ 660.307178] ? fput+0x2b/0x190 [ 660.310385] ksys_ioctl+0x9b/0xc0 [ 660.313849] __x64_sys_ioctl+0x6f/0xb0 [ 660.317737] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 660.322324] do_syscall_64+0xf9/0x620 [ 660.326264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.331455] RIP: 0033:0x7fa68977eeb9 [ 660.335167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.354071] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.361783] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 660.369067] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 09:32:11 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x0, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:11 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1f4}}, 0x1c) [ 660.376353] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.383640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.390923] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000078010200"/51], 0x1a8}}, 0x0) 09:32:11 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 2) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 660.530007] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 660.579233] FAULT_INJECTION: forcing a failure. [ 660.579233] name failslab, interval 1, probability 0, space 0, times 0 [ 660.600604] CPU: 1 PID: 5423 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 660.608438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.617807] Call Trace: [ 660.620407] dump_stack+0x1fc/0x2ef [ 660.624054] should_fail.cold+0xa/0xf [ 660.627867] ? setup_fault_attr+0x200/0x200 [ 660.632208] ? lock_acquire+0x170/0x3c0 [ 660.636208] __should_failslab+0x115/0x180 [ 660.640468] should_failslab+0x5/0x10 [ 660.644287] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 660.649408] __kmalloc_node+0x38/0x70 [ 660.653227] blk_mq_alloc_tag_set+0x330/0xa30 [ 660.657740] loop_add+0x26d/0x8a0 [ 660.661207] loop_control_ioctl+0x16c/0x480 [ 660.665537] ? loop_lookup+0x1d0/0x1d0 [ 660.669451] ? HARDIRQ_verbose+0x10/0x10 [ 660.673535] ? loop_lookup+0x1d0/0x1d0 [ 660.677443] do_vfs_ioctl+0xcdb/0x12e0 [ 660.681353] ? lock_downgrade+0x720/0x720 [ 660.685516] ? check_preemption_disabled+0x41/0x280 [ 660.690545] ? ioctl_preallocate+0x200/0x200 [ 660.694965] ? __fget+0x356/0x510 [ 660.698436] ? do_dup2+0x450/0x450 [ 660.701983] ? vfs_write+0x393/0x540 [ 660.705706] ? fput+0x2b/0x190 [ 660.708914] ksys_ioctl+0x9b/0xc0 [ 660.712378] __x64_sys_ioctl+0x6f/0xb0 [ 660.716275] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 660.720866] do_syscall_64+0xf9/0x620 [ 660.724680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.729873] RIP: 0033:0x7fa68977eeb9 [ 660.733595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.752503] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.760221] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 660.767496] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 09:32:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) 09:32:11 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2870000000000000000ff0200000084ecb1e8a0af7500000000000000000000010153907800000000608894d800002f00fc010000000000000000000000000000fe8001e7000d000000000000000000aa0006040300000000fe880000010000000000000000000000000000000001fc0200080000000000000000000000000000000000000000000000e261a19200"/166], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 660.774770] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.782040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.789318] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:11 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c) 09:32:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 3) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 660.963154] FAULT_INJECTION: forcing a failure. [ 660.963154] name failslab, interval 1, probability 0, space 0, times 0 [ 660.996025] CPU: 1 PID: 5441 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 661.003855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:32:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) [ 661.013218] Call Trace: [ 661.015817] dump_stack+0x1fc/0x2ef [ 661.019459] should_fail.cold+0xa/0xf [ 661.023272] ? setup_fault_attr+0x200/0x200 [ 661.027626] ? lock_acquire+0x170/0x3c0 [ 661.031619] __should_failslab+0x115/0x180 [ 661.035869] should_failslab+0x5/0x10 [ 661.039674] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 661.044790] __kmalloc_node+0x38/0x70 [ 661.048604] blk_mq_alloc_tag_set+0x3c2/0xa30 [ 661.053125] loop_add+0x26d/0x8a0 [ 661.056594] loop_control_ioctl+0x16c/0x480 [ 661.060928] ? loop_lookup+0x1d0/0x1d0 [ 661.064828] ? HARDIRQ_verbose+0x10/0x10 [ 661.068897] ? ksys_write+0x241/0x2a0 [ 661.072710] ? loop_lookup+0x1d0/0x1d0 [ 661.076607] do_vfs_ioctl+0xcdb/0x12e0 [ 661.080504] ? lock_downgrade+0x720/0x720 [ 661.084661] ? check_preemption_disabled+0x41/0x280 [ 661.089677] ? ioctl_preallocate+0x200/0x200 [ 661.094090] ? __fget+0x356/0x510 [ 661.097551] ? do_dup2+0x450/0x450 [ 661.101098] ? vfs_write+0x393/0x540 [ 661.104819] ? fput+0x2b/0x190 [ 661.108025] ksys_ioctl+0x9b/0xc0 [ 661.111485] __x64_sys_ioctl+0x6f/0xb0 [ 661.115466] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 661.120044] do_syscall_64+0xf9/0x620 [ 661.123852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.129042] RIP: 0033:0x7fa68977eeb9 [ 661.132763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.151670] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:32:12 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3e8}}, 0x1c) [ 661.159385] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 661.166658] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 661.173933] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.181207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.188479] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:12 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x2f, 0x2, 0x0) 09:32:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 4) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:12 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0x0, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:12 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500}}, 0x1c) 09:32:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) [ 661.430551] FAULT_INJECTION: forcing a failure. [ 661.430551] name failslab, interval 1, probability 0, space 0, times 0 [ 661.474410] CPU: 1 PID: 5460 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 661.482240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.491599] Call Trace: [ 661.494205] dump_stack+0x1fc/0x2ef [ 661.497842] should_fail.cold+0xa/0xf [ 661.501654] ? setup_fault_attr+0x200/0x200 [ 661.505987] ? lock_acquire+0x170/0x3c0 [ 661.509963] __should_failslab+0x115/0x180 [ 661.514202] should_failslab+0x5/0x10 [ 661.518007] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 661.523118] blk_mq_init_tags+0x6a/0x2b0 [ 661.527215] blk_mq_alloc_rq_map+0x9d/0x230 [ 661.531555] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 661.536079] blk_mq_alloc_tag_set+0x589/0xa30 [ 661.540599] loop_add+0x26d/0x8a0 [ 661.544065] loop_control_ioctl+0x16c/0x480 [ 661.548399] ? loop_lookup+0x1d0/0x1d0 [ 661.552307] ? HARDIRQ_verbose+0x10/0x10 [ 661.556387] ? loop_lookup+0x1d0/0x1d0 [ 661.560287] do_vfs_ioctl+0xcdb/0x12e0 [ 661.564199] ? lock_downgrade+0x720/0x720 [ 661.568357] ? check_preemption_disabled+0x41/0x280 [ 661.573387] ? ioctl_preallocate+0x200/0x200 [ 661.577810] ? __fget+0x356/0x510 [ 661.581274] ? do_dup2+0x450/0x450 [ 661.584821] ? vfs_write+0x393/0x540 [ 661.588543] ? fput+0x2b/0x190 [ 661.591754] ksys_ioctl+0x9b/0xc0 [ 661.595223] __x64_sys_ioctl+0x6f/0xb0 [ 661.599119] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 661.603710] do_syscall_64+0xf9/0x620 [ 661.607527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.612724] RIP: 0033:0x7fa68977eeb9 [ 661.616448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.635355] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.643071] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 661.650345] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 661.657620] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.664897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.672170] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b000200"], 0x1a8}}, 0x0) [ 661.704137] blk-mq: reduced tag depth (128 -> 64) 09:32:12 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 5) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:12 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2870000000000000000ff0200000084ecb1e8a0af7500000000000000000000010153907800000000608894d800002f00fc010000000000000000000000000000fe8001e7000d000000000000000000aa0006040300000000fe880000010000000000000000000000000000000001fc0200080000000000000000000000000000000000000000000000e261a19200"/166], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 64) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 64) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (rerun: 64) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:12 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600}}, 0x1c) 09:32:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 661.879633] FAULT_INJECTION: forcing a failure. [ 661.879633] name failslab, interval 1, probability 0, space 0, times 0 09:32:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) [ 661.954396] CPU: 0 PID: 5487 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 661.962244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.971623] Call Trace: [ 661.974248] dump_stack+0x1fc/0x2ef [ 661.977919] should_fail.cold+0xa/0xf [ 661.981767] ? setup_fault_attr+0x200/0x200 [ 661.986118] ? lock_acquire+0x170/0x3c0 [ 661.990148] __should_failslab+0x115/0x180 [ 661.994429] should_failslab+0x5/0x10 [ 661.998257] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 662.003407] __kmalloc_node+0x38/0x70 [ 662.007247] sbitmap_init_node+0x123/0x440 [ 662.011528] sbitmap_queue_init_node+0x37/0x6c0 [ 662.016233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 662.021301] blk_mq_init_tags+0x10d/0x2b0 [ 662.025485] blk_mq_alloc_rq_map+0x9d/0x230 [ 662.029843] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 662.034377] blk_mq_alloc_tag_set+0x589/0xa30 [ 662.038925] loop_add+0x26d/0x8a0 [ 662.042435] loop_control_ioctl+0x16c/0x480 [ 662.046799] ? loop_lookup+0x1d0/0x1d0 [ 662.050730] ? HARDIRQ_verbose+0x10/0x10 09:32:13 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c) [ 662.054833] ? loop_lookup+0x1d0/0x1d0 [ 662.058739] do_vfs_ioctl+0xcdb/0x12e0 [ 662.062644] ? lock_downgrade+0x720/0x720 [ 662.066816] ? check_preemption_disabled+0x41/0x280 [ 662.071835] ? ioctl_preallocate+0x200/0x200 [ 662.076278] ? __fget+0x356/0x510 [ 662.079765] ? do_dup2+0x450/0x450 [ 662.083329] ? vfs_write+0x393/0x540 [ 662.087075] ? fput+0x2b/0x190 [ 662.090308] ksys_ioctl+0x9b/0xc0 [ 662.093793] __x64_sys_ioctl+0x6f/0xb0 [ 662.097705] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 662.102316] do_syscall_64+0xf9/0x620 [ 662.106133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.111317] RIP: 0033:0x7fa68977eeb9 [ 662.115027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.133921] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.141622] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:13 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x30, 0x2, 0x0) 09:32:13 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2870000000000000000ff0200000084ecb1e8a0af7500000000000000000000010153907800000000608894d800002f00fc010000000000000000000000000000fe8001e7000d000000000000000000aa0006040300000000fe880000010000000000000000000000000000000001fc0200080000000000000000000000000000000000000000000000e261a19200"/166], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 64) r3 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async, rerun: 32) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (rerun: 32) [ 662.148880] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 662.156148] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.163409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.170669] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 662.182158] blk-mq: reduced tag depth (128 -> 64) 09:32:13 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0x0, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) 09:32:13 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 6) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 662.454185] FAULT_INJECTION: forcing a failure. [ 662.454185] name failslab, interval 1, probability 0, space 0, times 0 09:32:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b00"], 0x1a8}}, 0x0) [ 662.498848] CPU: 1 PID: 5527 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 662.506669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.516026] Call Trace: [ 662.518627] dump_stack+0x1fc/0x2ef [ 662.522269] should_fail.cold+0xa/0xf [ 662.526083] ? setup_fault_attr+0x200/0x200 [ 662.530415] ? lock_acquire+0x170/0x3c0 [ 662.534402] __should_failslab+0x115/0x180 [ 662.538647] should_failslab+0x5/0x10 [ 662.542455] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 662.547569] sbitmap_queue_init_node+0x240/0x6c0 [ 662.552327] blk_mq_init_tags+0x10d/0x2b0 [ 662.556475] blk_mq_alloc_rq_map+0x9d/0x230 [ 662.560792] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 662.565269] blk_mq_alloc_tag_set+0x589/0xa30 [ 662.569749] loop_add+0x26d/0x8a0 [ 662.573187] loop_control_ioctl+0x16c/0x480 [ 662.577491] ? loop_lookup+0x1d0/0x1d0 [ 662.581363] ? HARDIRQ_verbose+0x10/0x10 [ 662.585405] ? ksys_write+0x241/0x2a0 [ 662.589307] ? loop_lookup+0x1d0/0x1d0 [ 662.593192] do_vfs_ioctl+0xcdb/0x12e0 [ 662.593209] ? lock_downgrade+0x720/0x720 [ 662.593225] ? check_preemption_disabled+0x41/0x280 [ 662.593239] ? ioctl_preallocate+0x200/0x200 [ 662.593258] ? __fget+0x356/0x510 [ 662.593274] ? do_dup2+0x450/0x450 [ 662.593286] ? vfs_write+0x393/0x540 [ 662.593300] ? fput+0x2b/0x190 [ 662.593319] ksys_ioctl+0x9b/0xc0 [ 662.593334] __x64_sys_ioctl+0x6f/0xb0 [ 662.593349] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 662.636500] do_syscall_64+0xf9/0x620 [ 662.640298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.645476] RIP: 0033:0x7fa68977eeb9 [ 662.649179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.668070] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.675777] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 662.683063] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 662.690324] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 09:32:13 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x900}}, 0x1c) 09:32:13 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 662.697576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.704839] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 662.724447] blk-mq: reduced tag depth (128 -> 64) 09:32:13 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 7) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 662.886170] FAULT_INJECTION: forcing a failure. [ 662.886170] name failslab, interval 1, probability 0, space 0, times 0 [ 662.914173] CPU: 0 PID: 5548 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 662.922028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.931409] Call Trace: 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 662.934037] dump_stack+0x1fc/0x2ef [ 662.937708] should_fail.cold+0xa/0xf [ 662.941548] ? setup_fault_attr+0x200/0x200 [ 662.945901] ? lock_acquire+0x170/0x3c0 [ 662.949924] __should_failslab+0x115/0x180 [ 662.954192] should_failslab+0x5/0x10 [ 662.958024] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 662.963171] sbitmap_queue_init_node+0x240/0x6c0 [ 662.967980] blk_mq_init_tags+0x16f/0x2b0 [ 662.972170] blk_mq_alloc_rq_map+0x9d/0x230 [ 662.976536] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 662.981054] blk_mq_alloc_tag_set+0x589/0xa30 [ 662.985586] loop_add+0x26d/0x8a0 [ 662.989067] loop_control_ioctl+0x16c/0x480 [ 662.993402] ? loop_lookup+0x1d0/0x1d0 [ 662.997309] ? HARDIRQ_verbose+0x10/0x10 [ 663.001413] ? loop_lookup+0x1d0/0x1d0 [ 663.005328] do_vfs_ioctl+0xcdb/0x12e0 [ 663.009231] ? lock_downgrade+0x720/0x720 [ 663.013388] ? check_preemption_disabled+0x41/0x280 [ 663.018418] ? ioctl_preallocate+0x200/0x200 [ 663.022841] ? __fget+0x356/0x510 [ 663.026324] ? do_dup2+0x450/0x450 [ 663.029884] ? vfs_write+0x393/0x540 [ 663.033595] ? fput+0x2b/0x190 [ 663.036803] ksys_ioctl+0x9b/0xc0 [ 663.040257] __x64_sys_ioctl+0x6f/0xb0 [ 663.044140] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 663.048717] do_syscall_64+0xf9/0x620 [ 663.052547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.057758] RIP: 0033:0x7fa68977eeb9 [ 663.061477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:32:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xa00}}, 0x1c) [ 663.080386] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.088100] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 663.095476] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 663.102760] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 663.110032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.117296] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 663.130465] blk-mq: reduced tag depth (128 -> 64) 09:32:14 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0x0, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:14 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x31, 0x2, 0x0) 09:32:14 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 8) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00}}, 0x1c) 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 663.412657] FAULT_INJECTION: forcing a failure. [ 663.412657] name failslab, interval 1, probability 0, space 0, times 0 [ 663.448900] CPU: 1 PID: 5575 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 663.456727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.466083] Call Trace: [ 663.468678] dump_stack+0x1fc/0x2ef [ 663.472315] should_fail.cold+0xa/0xf [ 663.476128] ? setup_fault_attr+0x200/0x200 [ 663.480459] ? __lockdep_init_map+0x100/0x5a0 [ 663.482512] nla_parse: 10 callbacks suppressed [ 663.482523] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 663.484969] __should_failslab+0x115/0x180 [ 663.484990] should_failslab+0x5/0x10 [ 663.485007] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 663.485027] __kmalloc_node+0x38/0x70 [ 663.485045] blk_mq_alloc_rq_map+0xdf/0x230 [ 663.485064] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 663.523983] blk_mq_alloc_tag_set+0x589/0xa30 [ 663.528497] loop_add+0x26d/0x8a0 [ 663.531967] loop_control_ioctl+0x16c/0x480 [ 663.536298] ? loop_lookup+0x1d0/0x1d0 [ 663.540193] ? HARDIRQ_verbose+0x10/0x10 [ 663.544262] ? ksys_write+0x241/0x2a0 [ 663.548070] ? loop_lookup+0x1d0/0x1d0 [ 663.551969] do_vfs_ioctl+0xcdb/0x12e0 [ 663.555866] ? lock_downgrade+0x720/0x720 09:32:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000}}, 0x1c) [ 663.560019] ? check_preemption_disabled+0x41/0x280 [ 663.565038] ? ioctl_preallocate+0x200/0x200 [ 663.569458] ? __fget+0x356/0x510 [ 663.572920] ? do_dup2+0x450/0x450 [ 663.576466] ? vfs_write+0x393/0x540 [ 663.580187] ? fput+0x2b/0x190 [ 663.583395] ksys_ioctl+0x9b/0xc0 [ 663.586854] __x64_sys_ioctl+0x6f/0xb0 [ 663.590744] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 663.595320] do_syscall_64+0xf9/0x620 [ 663.599118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.604303] RIP: 0033:0x7fa68977eeb9 [ 663.608000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.626884] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.634582] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 663.641845] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 663.649097] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 663.656347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:32:14 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async, rerun: 32) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async, rerun: 64) r2 = socket$inet6(0xa, 0x6, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async, rerun: 64) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 64) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 663.663598] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 663.671811] blk-mq: reduced tag depth (128 -> 64) 09:32:14 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 9) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000}}, 0x1c) [ 663.861791] FAULT_INJECTION: forcing a failure. [ 663.861791] name failslab, interval 1, probability 0, space 0, times 0 [ 663.878543] CPU: 1 PID: 5607 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 663.886364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.895722] Call Trace: [ 663.898319] dump_stack+0x1fc/0x2ef [ 663.901955] should_fail.cold+0xa/0xf [ 663.905771] ? setup_fault_attr+0x200/0x200 [ 663.910105] ? __lockdep_init_map+0x100/0x5a0 [ 663.914608] __should_failslab+0x115/0x180 [ 663.918850] should_failslab+0x5/0x10 [ 663.922666] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 663.927778] __kmalloc_node+0x38/0x70 [ 663.931589] blk_mq_alloc_rq_map+0x120/0x230 [ 663.936006] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 663.940506] blk_mq_alloc_tag_set+0x589/0xa30 [ 663.945014] loop_add+0x26d/0x8a0 [ 663.948479] loop_control_ioctl+0x16c/0x480 [ 663.952806] ? loop_lookup+0x1d0/0x1d0 [ 663.956700] ? HARDIRQ_verbose+0x10/0x10 [ 663.960766] ? ksys_write+0x241/0x2a0 [ 663.964571] ? loop_lookup+0x1d0/0x1d0 [ 663.968461] do_vfs_ioctl+0xcdb/0x12e0 [ 663.972351] ? lock_downgrade+0x720/0x720 [ 663.976498] ? check_preemption_disabled+0x41/0x280 [ 663.981515] ? ioctl_preallocate+0x200/0x200 [ 663.985942] ? __fget+0x356/0x510 [ 663.989394] ? do_dup2+0x450/0x450 [ 663.992931] ? vfs_write+0x393/0x540 [ 663.996646] ? fput+0x2b/0x190 [ 663.999848] ksys_ioctl+0x9b/0xc0 [ 664.003310] __x64_sys_ioctl+0x6f/0xb0 [ 664.007204] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 664.011787] do_syscall_64+0xf9/0x620 [ 664.015595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.020780] RIP: 0033:0x7fa68977eeb9 [ 664.024491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 664.043389] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.051099] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 664.058366] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 664.065631] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 664.072905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.080171] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 664.113132] blk-mq: reduced tag depth (128 -> 64) 09:32:15 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x0, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:15 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x32, 0x2, 0x0) 09:32:15 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 10) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:15 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5800}}, 0x1c) 09:32:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 664.362346] FAULT_INJECTION: forcing a failure. [ 664.362346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 664.408196] CPU: 1 PID: 5638 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 664.416024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.425378] Call Trace: [ 664.427974] dump_stack+0x1fc/0x2ef [ 664.431610] should_fail.cold+0xa/0xf [ 664.435422] ? setup_fault_attr+0x200/0x200 [ 664.439765] __alloc_pages_nodemask+0x239/0x2890 [ 664.444524] ? kasan_kmalloc+0x139/0x160 [ 664.448567] ? __kmalloc_node+0x4c/0x70 [ 664.452522] ? blk_mq_alloc_rq_map+0x120/0x230 [ 664.457085] ? __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 664.461737] ? blk_mq_alloc_tag_set+0x589/0xa30 [ 664.466388] ? loop_add+0x26d/0x8a0 [ 664.470004] ? loop_control_ioctl+0x16c/0x480 [ 664.474488] ? do_vfs_ioctl+0xcdb/0x12e0 [ 664.478530] ? do_syscall_64+0xf9/0x620 [ 664.482501] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.487873] ? should_fail+0x142/0x7b0 [ 664.491752] ? fs_reclaim_release+0xd0/0x110 [ 664.496157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 664.500987] ? setup_fault_attr+0x200/0x200 [ 664.505291] ? lock_acquire+0x170/0x3c0 [ 664.509254] ? check_preemption_disabled+0x41/0x280 [ 664.514279] ? should_fail+0x142/0x7b0 [ 664.518175] ? setup_fault_attr+0x200/0x200 [ 664.522484] ? __lockdep_init_map+0x100/0x5a0 [ 664.526962] ? find_next_bit+0x105/0x130 [ 664.531009] ? __cpu_to_node+0x7b/0xa0 [ 664.534893] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 664.539740] blk_mq_alloc_rqs+0x242/0x800 [ 664.543904] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 664.548408] __blk_mq_alloc_rq_map+0x15b/0x3b0 [ 664.552998] blk_mq_alloc_tag_set+0x589/0xa30 [ 664.557496] loop_add+0x26d/0x8a0 [ 664.560937] loop_control_ioctl+0x16c/0x480 [ 664.565251] ? loop_lookup+0x1d0/0x1d0 [ 664.569132] ? HARDIRQ_verbose+0x10/0x10 [ 664.573194] ? loop_lookup+0x1d0/0x1d0 [ 664.577070] do_vfs_ioctl+0xcdb/0x12e0 [ 664.580945] ? lock_downgrade+0x720/0x720 [ 664.585075] ? check_preemption_disabled+0x41/0x280 [ 664.590085] ? ioctl_preallocate+0x200/0x200 [ 664.594487] ? __fget+0x356/0x510 [ 664.597923] ? do_dup2+0x450/0x450 [ 664.601451] ? vfs_write+0x393/0x540 [ 664.605174] ? fput+0x2b/0x190 [ 664.608365] ksys_ioctl+0x9b/0xc0 [ 664.611804] __x64_sys_ioctl+0x6f/0xb0 [ 664.615675] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 664.620241] do_syscall_64+0xf9/0x620 [ 664.624040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.629217] RIP: 0033:0x7fa68977eeb9 [ 664.632923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:32:15 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000}}, 0x1c) [ 664.651985] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.659681] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 664.666942] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 664.674191] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 664.681450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 664.688705] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:15 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 11) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 664.885731] FAULT_INJECTION: forcing a failure. [ 664.885731] name failslab, interval 1, probability 0, space 0, times 0 [ 664.907466] CPU: 1 PID: 5670 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 664.915289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.924663] Call Trace: [ 664.927264] dump_stack+0x1fc/0x2ef [ 664.930912] should_fail.cold+0xa/0xf [ 664.934726] ? setup_fault_attr+0x200/0x200 [ 664.939057] ? lock_acquire+0x170/0x3c0 [ 664.943050] __should_failslab+0x115/0x180 [ 664.947460] should_failslab+0x5/0x10 [ 664.951271] kmem_cache_alloc_node+0x245/0x3b0 [ 664.956045] blk_alloc_queue_node+0x32/0xbf0 [ 664.960473] blk_mq_init_queue+0x44/0xa0 [ 664.964544] loop_add+0x2cb/0x8a0 [ 664.968009] loop_control_ioctl+0x16c/0x480 [ 664.972337] ? loop_lookup+0x1d0/0x1d0 [ 664.976230] ? HARDIRQ_verbose+0x10/0x10 [ 664.980305] ? loop_lookup+0x1d0/0x1d0 [ 664.984200] do_vfs_ioctl+0xcdb/0x12e0 [ 664.988096] ? lock_downgrade+0x720/0x720 [ 664.992250] ? check_preemption_disabled+0x41/0x280 [ 664.997277] ? ioctl_preallocate+0x200/0x200 [ 665.001696] ? __fget+0x356/0x510 [ 665.005155] ? do_dup2+0x450/0x450 [ 665.008692] ? vfs_write+0x393/0x540 [ 665.012408] ? fput+0x2b/0x190 [ 665.015609] ksys_ioctl+0x9b/0xc0 [ 665.019067] __x64_sys_ioctl+0x6f/0xb0 [ 665.022960] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 665.027551] do_syscall_64+0xf9/0x620 [ 665.031363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.036554] RIP: 0033:0x7fa68977eeb9 [ 665.040267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 665.059172] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.066888] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 665.074161] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 09:32:16 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 09:32:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 665.081429] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 665.088695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 665.095967] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:16 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x0, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:16 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x33, 0x2, 0x0) 09:32:16 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 12) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:16 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2683a000000000000000000000000000000002aff0200000043000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe800000006fb3b4d3c25462420000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000000e0ee90179d1db6f62d357bbfad1bd580cb16b3fc4869f66b1b26d69a"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:16 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c) 09:32:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 665.381581] FAULT_INJECTION: forcing a failure. [ 665.381581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 665.393437] CPU: 0 PID: 5698 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 665.401261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.410646] Call Trace: [ 665.413261] dump_stack+0x1fc/0x2ef [ 665.416939] should_fail.cold+0xa/0xf [ 665.420778] ? setup_fault_attr+0x200/0x200 [ 665.425128] ? check_preemption_disabled+0x41/0x280 [ 665.430197] __alloc_pages_nodemask+0x239/0x2890 [ 665.434981] ? __alloc_pages_nodemask+0x1b43/0x2890 [ 665.440021] ? kasan_kmalloc+0x139/0x160 [ 665.444127] ? __lock_acquire+0x6de/0x3ff0 [ 665.448415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.453285] ? perf_trace_run_bpf_submit+0x144/0x220 [ 665.458439] ? perf_trace_lock_acquire+0x36b/0x530 [ 665.463422] ? HARDIRQ_verbose+0x10/0x10 [ 665.467532] cache_grow_begin+0xa4/0x8a0 [ 665.471621] ? setup_fault_attr+0x200/0x200 [ 665.475969] ? lock_acquire+0x170/0x3c0 [ 665.479981] cache_alloc_refill+0x273/0x340 [ 665.484348] kmem_cache_alloc_node+0x39e/0x3b0 [ 665.488973] blk_alloc_queue_node+0x32/0xbf0 [ 665.493425] blk_mq_init_queue+0x44/0xa0 [ 665.497518] loop_add+0x2cb/0x8a0 [ 665.500998] loop_control_ioctl+0x16c/0x480 [ 665.505314] ? loop_lookup+0x1d0/0x1d0 [ 665.509202] ? HARDIRQ_verbose+0x10/0x10 [ 665.513270] ? loop_lookup+0x1d0/0x1d0 [ 665.517157] do_vfs_ioctl+0xcdb/0x12e0 [ 665.521038] ? lock_downgrade+0x720/0x720 [ 665.525180] ? check_preemption_disabled+0x41/0x280 [ 665.530193] ? ioctl_preallocate+0x200/0x200 [ 665.534605] ? __fget+0x356/0x510 [ 665.538061] ? do_dup2+0x450/0x450 [ 665.541596] ? vfs_write+0x393/0x540 [ 665.545325] ? fput+0x2b/0x190 [ 665.548527] ksys_ioctl+0x9b/0xc0 [ 665.551993] __x64_sys_ioctl+0x6f/0xb0 [ 665.555878] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 665.560454] do_syscall_64+0xf9/0x620 [ 665.564261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.569448] RIP: 0033:0x7fa68977eeb9 [ 665.573167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 665.592068] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.599795] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 665.607076] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 665.614339] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 665.621603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:16 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2683a000000000000000000000000000000002aff0200000043000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe800000006fb3b4d3c25462420000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000000e0ee90179d1db6f62d357bbfad1bd580cb16b3fc4869f66b1b26d69a"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2683a000000000000000000000000000000002aff0200000043000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe800000006fb3b4d3c25462420000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000000e0ee90179d1db6f62d357bbfad1bd580cb16b3fc4869f66b1b26d69a"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) [ 665.628871] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:16 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 13) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 665.853865] FAULT_INJECTION: forcing a failure. [ 665.853865] name failslab, interval 1, probability 0, space 0, times 0 [ 665.890139] CPU: 1 PID: 5720 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 665.897963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.907335] Call Trace: [ 665.909939] dump_stack+0x1fc/0x2ef [ 665.913581] should_fail.cold+0xa/0xf [ 665.917399] ? setup_fault_attr+0x200/0x200 [ 665.921744] ? lock_acquire+0x170/0x3c0 [ 665.925743] __should_failslab+0x115/0x180 [ 665.929993] should_failslab+0x5/0x10 [ 665.933798] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 665.938915] __kmalloc_node+0x38/0x70 [ 665.942727] ? mempool_free+0x370/0x370 [ 665.946708] mempool_init_node+0x137/0x6c0 09:32:17 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe803}}, 0x1c) 09:32:17 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de2683a000000000000000000000000000000002aff0200000043000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe800000006fb3b4d3c25462420000aa0006040300000000fe880000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000000e0ee90179d1db6f62d357bbfad1bd580cb16b3fc4869f66b1b26d69a"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 32) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async, rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r0, 0x400000001ffffffd) (async, rerun: 32) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 665.950977] ? mempool_alloc+0x350/0x350 [ 665.955045] ? mempool_free+0x370/0x370 [ 665.959027] mempool_init+0x38/0x50 [ 665.962669] bioset_init+0x327/0x810 [ 665.966407] ? kmem_cache_alloc_node+0x351/0x3b0 [ 665.971185] blk_alloc_queue_node+0x189/0xbf0 [ 665.975703] blk_mq_init_queue+0x44/0xa0 [ 665.979770] loop_add+0x2cb/0x8a0 [ 665.983233] loop_control_ioctl+0x16c/0x480 [ 665.987559] ? loop_lookup+0x1d0/0x1d0 [ 665.991461] ? HARDIRQ_verbose+0x10/0x10 [ 665.995527] ? loop_lookup+0x1d0/0x1d0 [ 665.999407] do_vfs_ioctl+0xcdb/0x12e0 [ 666.003290] ? lock_downgrade+0x720/0x720 [ 666.007440] ? check_preemption_disabled+0x41/0x280 [ 666.012461] ? ioctl_preallocate+0x200/0x200 [ 666.016878] ? __fget+0x356/0x510 [ 666.020339] ? do_dup2+0x450/0x450 [ 666.023883] ? vfs_write+0x393/0x540 [ 666.027599] ? fput+0x2b/0x190 [ 666.030801] ksys_ioctl+0x9b/0xc0 [ 666.034288] __x64_sys_ioctl+0x6f/0xb0 [ 666.038178] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 666.042770] do_syscall_64+0xf9/0x620 [ 666.046581] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.051769] RIP: 0033:0x7fa68977eeb9 [ 666.055484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 666.074384] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.082092] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 666.089356] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 666.096623] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 666.103890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.111157] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:17 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x0, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:17 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x34, 0x2, 0x0) 09:32:17 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 14) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:17 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf401}}, 0x1c) 09:32:17 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250d000000080004000000010018000180060002002b0000000c0007000600000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) [ 666.342488] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 666.372242] FAULT_INJECTION: forcing a failure. [ 666.372242] name failslab, interval 1, probability 0, space 0, times 0 09:32:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:17 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc00}}, 0x1c) [ 666.456149] CPU: 0 PID: 5767 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 666.463997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.473370] Call Trace: [ 666.475988] dump_stack+0x1fc/0x2ef [ 666.479667] should_fail.cold+0xa/0xf [ 666.483500] ? setup_fault_attr+0x200/0x200 [ 666.487844] ? lock_acquire+0x170/0x3c0 [ 666.491874] __should_failslab+0x115/0x180 [ 666.496143] should_failslab+0x5/0x10 [ 666.499970] kmem_cache_alloc+0x277/0x370 [ 666.504135] ? mempool_alloc+0x350/0x350 [ 666.508193] mempool_init_node+0x2d0/0x6c0 [ 666.512434] ? mempool_alloc+0x350/0x350 [ 666.516492] ? mempool_free+0x370/0x370 [ 666.520461] mempool_init+0x38/0x50 [ 666.524087] bioset_init+0x327/0x810 [ 666.527803] ? kmem_cache_alloc_node+0x351/0x3b0 [ 666.532603] blk_alloc_queue_node+0x189/0xbf0 [ 666.537121] blk_mq_init_queue+0x44/0xa0 [ 666.541179] loop_add+0x2cb/0x8a0 [ 666.544640] loop_control_ioctl+0x16c/0x480 [ 666.548986] ? loop_lookup+0x1d0/0x1d0 [ 666.552887] ? HARDIRQ_verbose+0x10/0x10 [ 666.556945] ? ksys_write+0x241/0x2a0 [ 666.560745] ? loop_lookup+0x1d0/0x1d0 [ 666.564644] do_vfs_ioctl+0xcdb/0x12e0 [ 666.568547] ? lock_downgrade+0x720/0x720 [ 666.572699] ? check_preemption_disabled+0x41/0x280 [ 666.577741] ? ioctl_preallocate+0x200/0x200 [ 666.582197] ? __fget+0x356/0x510 [ 666.585664] ? do_dup2+0x450/0x450 [ 666.589199] ? vfs_write+0x393/0x540 [ 666.592911] ? fput+0x2b/0x190 [ 666.596113] ksys_ioctl+0x9b/0xc0 [ 666.599572] __x64_sys_ioctl+0x6f/0xb0 [ 666.603453] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 666.608030] do_syscall_64+0xf9/0x620 [ 666.611833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.617018] RIP: 0033:0x7fa68977eeb9 [ 666.620738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 666.639660] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.647395] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 666.654691] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 666.661958] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 666.669218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.676480] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:17 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 15) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 666.797770] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:17 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe80}}, 0x1c) [ 666.887783] FAULT_INJECTION: forcing a failure. [ 666.887783] name failslab, interval 1, probability 0, space 0, times 0 [ 666.900859] CPU: 0 PID: 5794 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 666.908686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.918061] Call Trace: [ 666.920681] dump_stack+0x1fc/0x2ef [ 666.924355] should_fail.cold+0xa/0xf [ 666.928195] ? setup_fault_attr+0x200/0x200 [ 666.932546] ? lock_acquire+0x170/0x3c0 [ 666.936748] __should_failslab+0x115/0x180 [ 666.941011] should_failslab+0x5/0x10 [ 666.944843] kmem_cache_alloc+0x277/0x370 [ 666.949022] ? mempool_alloc+0x350/0x350 [ 666.953120] mempool_init_node+0x2d0/0x6c0 [ 666.955123] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 666.957383] ? mempool_alloc+0x350/0x350 [ 666.957399] ? mempool_free+0x370/0x370 [ 666.974111] mempool_init+0x38/0x50 [ 666.977773] bioset_init+0x327/0x810 [ 666.981514] ? kmem_cache_alloc_node+0x351/0x3b0 [ 666.986295] blk_alloc_queue_node+0x189/0xbf0 [ 666.990820] blk_mq_init_queue+0x44/0xa0 [ 666.994892] loop_add+0x2cb/0x8a0 [ 666.998347] loop_control_ioctl+0x16c/0x480 [ 667.002668] ? loop_lookup+0x1d0/0x1d0 [ 667.006553] ? HARDIRQ_verbose+0x10/0x10 [ 667.010619] ? loop_lookup+0x1d0/0x1d0 [ 667.014510] do_vfs_ioctl+0xcdb/0x12e0 [ 667.018406] ? lock_downgrade+0x720/0x720 [ 667.022562] ? check_preemption_disabled+0x41/0x280 [ 667.027585] ? ioctl_preallocate+0x200/0x200 [ 667.031996] ? __fget+0x356/0x510 [ 667.035449] ? do_dup2+0x450/0x450 [ 667.038983] ? vfs_write+0x393/0x540 [ 667.042711] ? fput+0x2b/0x190 [ 667.045920] ksys_ioctl+0x9b/0xc0 [ 667.049379] __x64_sys_ioctl+0x6f/0xb0 [ 667.053260] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 667.057837] do_syscall_64+0xf9/0x620 [ 667.061646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.066833] RIP: 0033:0x7fa68977eeb9 09:32:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 667.070539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 667.089431] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.097143] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 667.104417] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 667.111689] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.118947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.126210] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:18 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x0, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:18 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 16) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:18 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x35, 0x2, 0x0) [ 667.321097] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.383540] FAULT_INJECTION: forcing a failure. [ 667.383540] name failslab, interval 1, probability 0, space 0, times 0 09:32:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 667.436997] CPU: 0 PID: 5811 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 667.444845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.454223] Call Trace: [ 667.456841] dump_stack+0x1fc/0x2ef [ 667.460507] should_fail.cold+0xa/0xf [ 667.464351] ? setup_fault_attr+0x200/0x200 [ 667.468701] ? lock_acquire+0x170/0x3c0 [ 667.472723] __should_failslab+0x115/0x180 [ 667.476990] should_failslab+0x5/0x10 [ 667.480816] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 667.485937] __kmalloc_node+0x38/0x70 [ 667.489731] ? mempool_free+0x370/0x370 [ 667.493705] mempool_init_node+0x137/0x6c0 [ 667.497943] ? mempool_alloc+0x350/0x350 [ 667.502006] ? mempool_free+0x370/0x370 [ 667.505968] mempool_init+0x38/0x50 [ 667.509610] bioset_init+0x532/0x810 [ 667.513320] ? kmem_cache_alloc_node+0x351/0x3b0 [ 667.518076] blk_alloc_queue_node+0x189/0xbf0 [ 667.522585] blk_mq_init_queue+0x44/0xa0 [ 667.526642] loop_add+0x2cb/0x8a0 [ 667.530102] loop_control_ioctl+0x16c/0x480 [ 667.534421] ? loop_lookup+0x1d0/0x1d0 [ 667.538438] ? HARDIRQ_verbose+0x10/0x10 [ 667.542509] ? loop_lookup+0x1d0/0x1d0 [ 667.546415] do_vfs_ioctl+0xcdb/0x12e0 [ 667.550299] ? lock_downgrade+0x720/0x720 [ 667.554446] ? check_preemption_disabled+0x41/0x280 [ 667.559453] ? ioctl_preallocate+0x200/0x200 [ 667.563866] ? __fget+0x356/0x510 [ 667.567319] ? do_dup2+0x450/0x450 [ 667.570851] ? vfs_write+0x393/0x540 [ 667.574561] ? fput+0x2b/0x190 [ 667.577772] ksys_ioctl+0x9b/0xc0 [ 667.581233] __x64_sys_ioctl+0x6f/0xb0 [ 667.585112] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 667.589688] do_syscall_64+0xf9/0x620 [ 667.593491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.598671] RIP: 0033:0x7fa68977eeb9 [ 667.602380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 667.621280] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.628979] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:18 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0}}, 0x1c) 09:32:18 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250d000000080004000000010018000180060002002b0000000c0007000600000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250d000000080004000000010018000180060002002b0000000c0007000600000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) [ 667.636246] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 667.643505] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.650767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.658026] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:18 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 17) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:18 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) [ 667.778283] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 667.853487] FAULT_INJECTION: forcing a failure. [ 667.853487] name failslab, interval 1, probability 0, space 0, times 0 [ 667.889725] CPU: 1 PID: 5831 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 667.897556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.906909] Call Trace: [ 667.909505] dump_stack+0x1fc/0x2ef [ 667.913149] should_fail.cold+0xa/0xf [ 667.916962] ? setup_fault_attr+0x200/0x200 [ 667.921296] ? lock_acquire+0x170/0x3c0 [ 667.925278] ? mempool_free+0x370/0x370 [ 667.929257] ? mempool_free+0x370/0x370 [ 667.933235] __should_failslab+0x115/0x180 [ 667.937486] should_failslab+0x5/0x10 [ 667.941296] kmem_cache_alloc+0x277/0x370 [ 667.945452] ? mempool_alloc+0x350/0x350 [ 667.949513] ? mempool_free+0x370/0x370 [ 667.953486] mempool_init_node+0x2d0/0x6c0 [ 667.957732] ? mempool_alloc+0x350/0x350 [ 667.961796] ? mempool_free+0x370/0x370 [ 667.965774] mempool_init+0x38/0x50 [ 667.969404] bioset_init+0x532/0x810 [ 667.973123] ? kmem_cache_alloc_node+0x351/0x3b0 [ 667.977883] blk_alloc_queue_node+0x189/0xbf0 [ 667.982387] blk_mq_init_queue+0x44/0xa0 [ 667.986451] loop_add+0x2cb/0x8a0 [ 667.989916] loop_control_ioctl+0x16c/0x480 [ 667.994248] ? loop_lookup+0x1d0/0x1d0 [ 667.998156] ? HARDIRQ_verbose+0x10/0x10 09:32:19 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1000000}}, 0x1c) [ 668.002232] ? loop_lookup+0x1d0/0x1d0 [ 668.006128] do_vfs_ioctl+0xcdb/0x12e0 [ 668.010020] ? lock_downgrade+0x720/0x720 [ 668.014172] ? check_preemption_disabled+0x41/0x280 [ 668.019189] ? ioctl_preallocate+0x200/0x200 [ 668.023604] ? __fget+0x356/0x510 [ 668.027062] ? do_dup2+0x450/0x450 [ 668.030599] ? vfs_write+0x393/0x540 [ 668.034317] ? fput+0x2b/0x190 [ 668.037517] ksys_ioctl+0x9b/0xc0 [ 668.040973] __x64_sys_ioctl+0x6f/0xb0 [ 668.044862] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 668.049436] do_syscall_64+0xf9/0x620 [ 668.053240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.058418] RIP: 0033:0x7fa68977eeb9 [ 668.062121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.081019] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.088734] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 668.096003] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 09:32:19 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250d000000080004000000010018000180060002002b0000000c0007000600000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async, rerun: 64) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (rerun: 64) [ 668.103274] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 668.110544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.117810] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:19 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x0, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:19 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 18) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x36, 0x2, 0x0) [ 668.230232] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 668.336707] FAULT_INJECTION: forcing a failure. [ 668.336707] name failslab, interval 1, probability 0, space 0, times 0 [ 668.400428] CPU: 0 PID: 5879 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 668.408287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.417662] Call Trace: [ 668.420274] dump_stack+0x1fc/0x2ef [ 668.423914] should_fail.cold+0xa/0xf [ 668.427719] ? setup_fault_attr+0x200/0x200 [ 668.432056] ? lock_acquire+0x170/0x3c0 [ 668.436075] __should_failslab+0x115/0x180 [ 668.440314] should_failslab+0x5/0x10 [ 668.444121] kmem_cache_alloc+0x277/0x370 [ 668.448262] ? mempool_alloc+0x350/0x350 [ 668.452323] mempool_init_node+0x2d0/0x6c0 [ 668.456567] ? mempool_alloc+0x350/0x350 [ 668.460621] ? mempool_free+0x370/0x370 [ 668.464592] mempool_init+0x38/0x50 [ 668.468224] bioset_init+0x532/0x810 [ 668.471933] ? kmem_cache_alloc_node+0x351/0x3b0 [ 668.476691] blk_alloc_queue_node+0x189/0xbf0 [ 668.481193] blk_mq_init_queue+0x44/0xa0 [ 668.485253] loop_add+0x2cb/0x8a0 [ 668.488710] loop_control_ioctl+0x16c/0x480 [ 668.493026] ? loop_lookup+0x1d0/0x1d0 [ 668.496910] ? HARDIRQ_verbose+0x10/0x10 [ 668.500976] ? loop_lookup+0x1d0/0x1d0 [ 668.504865] do_vfs_ioctl+0xcdb/0x12e0 [ 668.508749] ? lock_downgrade+0x720/0x720 [ 668.512895] ? check_preemption_disabled+0x41/0x280 [ 668.517910] ? ioctl_preallocate+0x200/0x200 [ 668.522324] ? __fget+0x356/0x510 [ 668.525803] ? do_dup2+0x450/0x450 [ 668.529350] ? vfs_write+0x393/0x540 [ 668.533061] ? fput+0x2b/0x190 [ 668.536288] ksys_ioctl+0x9b/0xc0 [ 668.539753] __x64_sys_ioctl+0x6f/0xb0 [ 668.543649] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 668.548239] do_syscall_64+0xf9/0x620 [ 668.552037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.557217] RIP: 0033:0x7fa68977eeb9 [ 668.560938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.579846] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.587554] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:19 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000000}}, 0x1c) [ 668.594817] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 668.602086] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 668.609347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.616620] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:19 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 19) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 668.760007] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 668.783187] FAULT_INJECTION: forcing a failure. [ 668.783187] name failslab, interval 1, probability 0, space 0, times 0 [ 668.819395] CPU: 0 PID: 5899 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 668.827237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.836602] Call Trace: [ 668.839203] dump_stack+0x1fc/0x2ef [ 668.842865] should_fail.cold+0xa/0xf [ 668.846685] ? setup_fault_attr+0x200/0x200 [ 668.851023] ? lock_acquire+0x170/0x3c0 [ 668.855019] __should_failslab+0x115/0x180 [ 668.859257] should_failslab+0x5/0x10 [ 668.863063] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 668.868173] bdi_alloc_node+0x5c/0xd0 [ 668.871973] blk_alloc_queue_node+0x1af/0xbf0 [ 668.876495] blk_mq_init_queue+0x44/0xa0 [ 668.880586] loop_add+0x2cb/0x8a0 [ 668.884079] loop_control_ioctl+0x16c/0x480 [ 668.888427] ? loop_lookup+0x1d0/0x1d0 [ 668.892336] ? HARDIRQ_verbose+0x10/0x10 [ 668.896429] ? loop_lookup+0x1d0/0x1d0 [ 668.900335] do_vfs_ioctl+0xcdb/0x12e0 [ 668.904231] ? lock_downgrade+0x720/0x720 [ 668.908378] ? check_preemption_disabled+0x41/0x280 [ 668.913396] ? ioctl_preallocate+0x200/0x200 [ 668.917848] ? __fget+0x356/0x510 [ 668.921329] ? do_dup2+0x450/0x450 [ 668.924890] ? vfs_write+0x393/0x540 [ 668.928619] ? fput+0x2b/0x190 [ 668.931842] ksys_ioctl+0x9b/0xc0 [ 668.935330] __x64_sys_ioctl+0x6f/0xb0 [ 668.939228] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 668.943822] do_syscall_64+0xf9/0x620 [ 668.947643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.952887] RIP: 0033:0x7fa68977eeb9 09:32:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:20 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3000000}}, 0x1c) [ 668.956609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.975505] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.983221] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 668.990486] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 668.997750] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.005015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.012297] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:20 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:20 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 20) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:20 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x0, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 669.126161] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b0000000000000003000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:20 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x37, 0x2, 0x0) 09:32:20 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0xa, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:32:20 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c) [ 669.271166] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.289714] FAULT_INJECTION: forcing a failure. [ 669.289714] name failslab, interval 1, probability 0, space 0, times 0 [ 669.366749] CPU: 1 PID: 5925 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 669.374575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.383939] Call Trace: [ 669.386535] dump_stack+0x1fc/0x2ef [ 669.390168] should_fail.cold+0xa/0xf [ 669.393976] ? setup_fault_attr+0x200/0x200 [ 669.398301] ? lock_acquire+0x170/0x3c0 [ 669.402292] __should_failslab+0x115/0x180 [ 669.406553] should_failslab+0x5/0x10 [ 669.410354] kmem_cache_alloc_trace+0x284/0x380 09:32:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000000000000300000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 669.415032] blk_alloc_queue_stats+0x3c/0x100 [ 669.419529] blk_alloc_queue_node+0x1eb/0xbf0 [ 669.424042] blk_mq_init_queue+0x44/0xa0 [ 669.428111] loop_add+0x2cb/0x8a0 [ 669.431572] loop_control_ioctl+0x16c/0x480 [ 669.435901] ? loop_lookup+0x1d0/0x1d0 [ 669.439793] ? HARDIRQ_verbose+0x10/0x10 [ 669.443859] ? ksys_write+0x241/0x2a0 [ 669.447670] ? loop_lookup+0x1d0/0x1d0 [ 669.451563] do_vfs_ioctl+0xcdb/0x12e0 [ 669.455460] ? lock_downgrade+0x720/0x720 [ 669.459613] ? check_preemption_disabled+0x41/0x280 [ 669.464631] ? ioctl_preallocate+0x200/0x200 [ 669.469046] ? __fget+0x356/0x510 [ 669.472506] ? do_dup2+0x450/0x450 [ 669.476046] ? vfs_write+0x393/0x540 [ 669.479768] ? fput+0x2b/0x190 [ 669.482975] ksys_ioctl+0x9b/0xc0 [ 669.486439] __x64_sys_ioctl+0x6f/0xb0 [ 669.490329] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 669.494911] do_syscall_64+0xf9/0x620 [ 669.498719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.503908] RIP: 0033:0x7fa68977eeb9 [ 669.507619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.526511] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.534208] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 669.541477] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 669.548746] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.556018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.563294] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:20 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 21) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:20 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0xa, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 669.686827] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.712055] FAULT_INJECTION: forcing a failure. [ 669.712055] name failslab, interval 1, probability 0, space 0, times 0 [ 669.744540] CPU: 1 PID: 5960 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 669.752376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.761734] Call Trace: [ 669.764335] dump_stack+0x1fc/0x2ef [ 669.767984] should_fail.cold+0xa/0xf [ 669.771803] ? setup_fault_attr+0x200/0x200 [ 669.776135] ? lock_acquire+0x170/0x3c0 [ 669.780122] __should_failslab+0x115/0x180 [ 669.784369] should_failslab+0x5/0x10 [ 669.788174] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 669.793286] blkg_alloc+0x92/0x630 [ 669.796838] blkcg_init_queue+0x24/0x540 [ 669.800911] blk_alloc_queue_node+0x7d0/0xbf0 [ 669.805426] blk_mq_init_queue+0x44/0xa0 [ 669.809494] loop_add+0x2cb/0x8a0 [ 669.812959] loop_control_ioctl+0x16c/0x480 [ 669.817288] ? loop_lookup+0x1d0/0x1d0 [ 669.821185] ? HARDIRQ_verbose+0x10/0x10 [ 669.825255] ? ksys_write+0x241/0x2a0 [ 669.829061] ? loop_lookup+0x1d0/0x1d0 [ 669.832953] do_vfs_ioctl+0xcdb/0x12e0 [ 669.836845] ? lock_downgrade+0x720/0x720 [ 669.840999] ? check_preemption_disabled+0x41/0x280 [ 669.846108] ? ioctl_preallocate+0x200/0x200 [ 669.850526] ? __fget+0x356/0x510 [ 669.853985] ? do_dup2+0x450/0x450 [ 669.857535] ? vfs_write+0x393/0x540 [ 669.861255] ? fput+0x2b/0x190 [ 669.864458] ksys_ioctl+0x9b/0xc0 [ 669.867919] __x64_sys_ioctl+0x6f/0xb0 [ 669.871808] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 669.876392] do_syscall_64+0xf9/0x620 [ 669.880201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.885390] RIP: 0033:0x7fa68977eeb9 [ 669.889103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.907998] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.915702] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 669.922974] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 669.930246] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.937527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000000000000300000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:21 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006050300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 669.944811] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:21 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c) 09:32:21 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 22) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:21 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:21 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x38, 0x2, 0x0) [ 670.100113] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 670.119149] FAULT_INJECTION: forcing a failure. [ 670.119149] name failslab, interval 1, probability 0, space 0, times 0 09:32:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b000000000000000300000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 670.167995] CPU: 1 PID: 5984 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 670.175823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.185180] Call Trace: [ 670.187785] dump_stack+0x1fc/0x2ef [ 670.191425] should_fail.cold+0xa/0xf [ 670.195240] ? setup_fault_attr+0x200/0x200 [ 670.199569] ? lock_acquire+0x170/0x3c0 [ 670.203560] __should_failslab+0x115/0x180 [ 670.207809] should_failslab+0x5/0x10 [ 670.211628] kmem_cache_alloc_trace+0x284/0x380 [ 670.216347] blk_iolatency_init+0x47/0x2d0 [ 670.220568] blkcg_init_queue+0x1c1/0x540 [ 670.224698] blk_alloc_queue_node+0x7d0/0xbf0 [ 670.229176] blk_mq_init_queue+0x44/0xa0 [ 670.233222] loop_add+0x2cb/0x8a0 [ 670.236661] loop_control_ioctl+0x16c/0x480 [ 670.240965] ? loop_lookup+0x1d0/0x1d0 [ 670.244834] ? HARDIRQ_verbose+0x10/0x10 [ 670.248873] ? ksys_write+0x241/0x2a0 [ 670.252655] ? loop_lookup+0x1d0/0x1d0 [ 670.256527] do_vfs_ioctl+0xcdb/0x12e0 [ 670.260410] ? lock_downgrade+0x720/0x720 [ 670.264549] ? check_preemption_disabled+0x41/0x280 [ 670.269559] ? ioctl_preallocate+0x200/0x200 [ 670.273965] ? __fget+0x356/0x510 [ 670.277415] ? do_dup2+0x450/0x450 [ 670.280937] ? vfs_write+0x393/0x540 [ 670.284631] ? fput+0x2b/0x190 [ 670.287807] ksys_ioctl+0x9b/0xc0 [ 670.291243] __x64_sys_ioctl+0x6f/0xb0 [ 670.295110] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 670.299683] do_syscall_64+0xf9/0x620 [ 670.303475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.308645] RIP: 0033:0x7fa68977eeb9 [ 670.312341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.331220] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.338948] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 670.346199] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 670.353458] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.360727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:21 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000000}}, 0x1c) [ 670.367994] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:21 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 23) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 670.502588] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 1) [ 670.605284] FAULT_INJECTION: forcing a failure. [ 670.605284] name failslab, interval 1, probability 0, space 0, times 0 [ 670.617331] CPU: 1 PID: 6008 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 670.625140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.634492] Call Trace: [ 670.637087] dump_stack+0x1fc/0x2ef [ 670.640735] should_fail.cold+0xa/0xf [ 670.644543] ? setup_fault_attr+0x200/0x200 [ 670.648874] ? lock_acquire+0x170/0x3c0 [ 670.652865] __should_failslab+0x115/0x180 [ 670.657109] should_failslab+0x5/0x10 [ 670.660917] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 670.666028] ? iolatency_pd_init+0x6f0/0x6f0 [ 670.670439] iolatency_pd_alloc+0x6e/0x120 [ 670.674675] blkcg_activate_policy+0x120/0x5d0 [ 670.679265] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 670.684289] blk_iolatency_init+0x123/0x2d0 [ 670.688617] blkcg_init_queue+0x1c1/0x540 [ 670.692774] blk_alloc_queue_node+0x7d0/0xbf0 [ 670.697278] blk_mq_init_queue+0x44/0xa0 [ 670.701351] loop_add+0x2cb/0x8a0 [ 670.704820] loop_control_ioctl+0x16c/0x480 [ 670.709145] ? loop_lookup+0x1d0/0x1d0 [ 670.713039] ? HARDIRQ_verbose+0x10/0x10 [ 670.717112] ? loop_lookup+0x1d0/0x1d0 [ 670.721005] do_vfs_ioctl+0xcdb/0x12e0 [ 670.724899] ? lock_downgrade+0x720/0x720 [ 670.729054] ? check_preemption_disabled+0x41/0x280 [ 670.734073] ? ioctl_preallocate+0x200/0x200 [ 670.738490] ? __fget+0x356/0x510 [ 670.741953] ? do_dup2+0x450/0x450 [ 670.745494] ? vfs_write+0x393/0x540 [ 670.749212] ? fput+0x2b/0x190 [ 670.752417] ksys_ioctl+0x9b/0xc0 [ 670.755064] FAULT_INJECTION: forcing a failure. [ 670.755064] name failslab, interval 1, probability 0, space 0, times 0 [ 670.755876] __x64_sys_ioctl+0x6f/0xb0 [ 670.755894] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 670.755909] do_syscall_64+0xf9/0x620 [ 670.755931] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.755944] RIP: 0033:0x7fa68977eeb9 [ 670.755957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.755973] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.814830] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 670.822102] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 670.829376] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.836642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.843910] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 670.851203] CPU: 0 PID: 6017 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 670.859033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.868406] Call Trace: [ 670.871027] dump_stack+0x1fc/0x2ef [ 670.874700] should_fail.cold+0xa/0xf [ 670.878541] ? setup_fault_attr+0x200/0x200 [ 670.882891] ? lock_acquire+0x170/0x3c0 [ 670.886921] __should_failslab+0x115/0x180 [ 670.891187] should_failslab+0x5/0x10 [ 670.895016] kmem_cache_alloc_node+0x245/0x3b0 [ 670.899643] __alloc_skb+0x71/0x560 [ 670.903314] netlink_sendmsg+0x9f6/0xc50 [ 670.907417] ? aa_af_perm+0x230/0x230 [ 670.911247] ? nlmsg_notify+0x1f0/0x1f0 [ 670.915241] ? kernel_recvmsg+0x220/0x220 [ 670.919417] ? nlmsg_notify+0x1f0/0x1f0 [ 670.923408] sock_sendmsg+0xc3/0x120 [ 670.927120] ___sys_sendmsg+0x7bb/0x8e0 [ 670.931097] ? copy_msghdr_from_user+0x440/0x440 [ 670.935853] ? __fget+0x32f/0x510 [ 670.939329] ? lock_downgrade+0x720/0x720 [ 670.943476] ? check_preemption_disabled+0x41/0x280 [ 670.948508] ? check_preemption_disabled+0x41/0x280 [ 670.953543] ? __fget+0x356/0x510 [ 670.956997] ? do_dup2+0x450/0x450 [ 670.960529] ? lock_downgrade+0x720/0x720 [ 670.964675] ? vfs_write+0x3d7/0x540 [ 670.968417] ? __fdget+0x1d0/0x230 [ 670.971967] __x64_sys_sendmsg+0x132/0x220 [ 670.976206] ? __sys_sendmsg+0x1b0/0x1b0 [ 670.980270] ? vfs_write+0x393/0x540 [ 670.984000] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 670.989379] ? trace_hardirqs_off_caller+0x6e/0x210 [ 670.994411] ? do_syscall_64+0x21/0x620 [ 670.998443] do_syscall_64+0xf9/0x620 [ 671.002263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.007448] RIP: 0033:0x7f6e9b735eb9 [ 671.011155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.030054] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.037754] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 671.045019] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 09:32:22 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7000000}}, 0x1c) [ 671.052281] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.059553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.066827] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 09:32:22 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006050300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:22 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 24) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 2) [ 671.240891] FAULT_INJECTION: forcing a failure. [ 671.240891] name failslab, interval 1, probability 0, space 0, times 0 [ 671.252403] CPU: 0 PID: 6035 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 671.260230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.260553] FAULT_INJECTION: forcing a failure. [ 671.260553] name failslab, interval 1, probability 0, space 0, times 0 [ 671.269601] Call Trace: [ 671.269646] dump_stack+0x1fc/0x2ef [ 671.269683] should_fail.cold+0xa/0xf [ 671.269716] ? setup_fault_attr+0x200/0x200 [ 671.295225] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 671.300277] __should_failslab+0x115/0x180 [ 671.304540] should_failslab+0x5/0x10 [ 671.308361] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 671.313405] iolatency_pd_alloc+0x6e/0x120 [ 671.317647] ? iolatency_pd_init+0x6f0/0x6f0 [ 671.322068] blkcg_activate_policy+0x249/0x5d0 [ 671.326690] blk_iolatency_init+0x123/0x2d0 [ 671.331040] blkcg_init_queue+0x1c1/0x540 [ 671.335213] blk_alloc_queue_node+0x7d0/0xbf0 [ 671.339735] blk_mq_init_queue+0x44/0xa0 [ 671.343817] loop_add+0x2cb/0x8a0 [ 671.347295] loop_control_ioctl+0x16c/0x480 [ 671.351630] ? loop_lookup+0x1d0/0x1d0 [ 671.355539] ? HARDIRQ_verbose+0x10/0x10 [ 671.359620] ? loop_lookup+0x1d0/0x1d0 [ 671.363532] do_vfs_ioctl+0xcdb/0x12e0 [ 671.367434] ? lock_downgrade+0x720/0x720 [ 671.371605] ? check_preemption_disabled+0x41/0x280 [ 671.376651] ? ioctl_preallocate+0x200/0x200 [ 671.381104] ? __fget+0x356/0x510 [ 671.384593] ? do_dup2+0x450/0x450 [ 671.388154] ? vfs_write+0x393/0x540 [ 671.391890] ? fput+0x2b/0x190 [ 671.395116] ksys_ioctl+0x9b/0xc0 [ 671.398591] __x64_sys_ioctl+0x6f/0xb0 [ 671.402499] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 671.407100] do_syscall_64+0xf9/0x620 [ 671.410926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.416294] RIP: 0033:0x7fa68977eeb9 [ 671.420014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.438922] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.446641] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 671.453920] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 671.461193] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.468470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.475750] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 671.483090] CPU: 1 PID: 6034 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 09:32:22 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:22 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x39, 0x2, 0x0) 09:32:22 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8000000}}, 0x1c) [ 671.490898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.500258] Call Trace: [ 671.502854] dump_stack+0x1fc/0x2ef [ 671.506498] should_fail.cold+0xa/0xf [ 671.510306] ? setup_fault_attr+0x200/0x200 [ 671.514632] ? lock_acquire+0x170/0x3c0 [ 671.518619] __should_failslab+0x115/0x180 [ 671.522857] should_failslab+0x5/0x10 [ 671.526665] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 671.531779] __kmalloc_node_track_caller+0x38/0x70 [ 671.536721] __alloc_skb+0xae/0x560 [ 671.540357] netlink_sendmsg+0x9f6/0xc50 [ 671.544431] ? aa_af_perm+0x230/0x230 [ 671.548239] ? nlmsg_notify+0x1f0/0x1f0 [ 671.552226] ? kernel_recvmsg+0x220/0x220 [ 671.556388] ? nlmsg_notify+0x1f0/0x1f0 [ 671.560361] sock_sendmsg+0xc3/0x120 [ 671.564084] ___sys_sendmsg+0x7bb/0x8e0 [ 671.568066] ? copy_msghdr_from_user+0x440/0x440 [ 671.572831] ? __fget+0x32f/0x510 [ 671.576296] ? lock_downgrade+0x720/0x720 [ 671.580453] ? check_preemption_disabled+0x41/0x280 [ 671.585478] ? check_preemption_disabled+0x41/0x280 [ 671.590508] ? __fget+0x356/0x510 [ 671.593973] ? do_dup2+0x450/0x450 [ 671.597520] ? lock_downgrade+0x720/0x720 [ 671.601678] ? vfs_write+0x3d7/0x540 [ 671.605402] ? __fdget+0x1d0/0x230 [ 671.608954] __x64_sys_sendmsg+0x132/0x220 [ 671.613197] ? __sys_sendmsg+0x1b0/0x1b0 [ 671.617270] ? vfs_write+0x393/0x540 [ 671.621003] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 671.626375] ? trace_hardirqs_off_caller+0x6e/0x210 [ 671.631398] ? do_syscall_64+0x21/0x620 [ 671.635383] do_syscall_64+0xf9/0x620 [ 671.639199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.644389] RIP: 0033:0x7f6e9b735eb9 [ 671.648107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.667010] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.674726] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 671.681995] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 671.689267] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.696539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.703810] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 09:32:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 3) 09:32:22 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 25) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:23 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x9000000}}, 0x1c) [ 671.855221] FAULT_INJECTION: forcing a failure. [ 671.855221] name failslab, interval 1, probability 0, space 0, times 0 [ 671.918895] CPU: 0 PID: 6056 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 671.926743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.936129] Call Trace: [ 671.938759] dump_stack+0x1fc/0x2ef [ 671.942437] should_fail.cold+0xa/0xf [ 671.946281] ? setup_fault_attr+0x200/0x200 [ 671.950640] ? HARDIRQ_verbose+0x10/0x10 [ 671.954734] ? lock_downgrade+0x720/0x720 [ 671.958908] ? check_preemption_disabled+0x41/0x280 [ 671.963946] __should_failslab+0x115/0x180 [ 671.968185] should_failslab+0x5/0x10 [ 671.971997] kmem_cache_alloc+0x3f/0x370 [ 671.976099] skb_clone+0x151/0x3d0 [ 671.979677] netlink_deliver_tap+0x955/0xb00 [ 671.984143] netlink_unicast+0x545/0x690 [ 671.988249] ? netlink_sendskb+0x110/0x110 [ 671.992509] ? _copy_from_iter_full+0x229/0x7c0 [ 671.997205] ? __phys_addr_symbol+0x2c/0x70 [ 672.001553] ? __check_object_size+0x17b/0x3e0 [ 672.006192] netlink_sendmsg+0x6c3/0xc50 [ 672.010294] ? aa_af_perm+0x230/0x230 [ 672.014125] ? nlmsg_notify+0x1f0/0x1f0 [ 672.018120] ? kernel_recvmsg+0x220/0x220 [ 672.022327] ? nlmsg_notify+0x1f0/0x1f0 [ 672.026337] sock_sendmsg+0xc3/0x120 [ 672.030079] ___sys_sendmsg+0x7bb/0x8e0 [ 672.034095] ? copy_msghdr_from_user+0x440/0x440 [ 672.038887] ? __fget+0x32f/0x510 [ 672.042382] ? lock_downgrade+0x720/0x720 [ 672.043844] FAULT_INJECTION: forcing a failure. [ 672.043844] name failslab, interval 1, probability 0, space 0, times 0 [ 672.046547] ? check_preemption_disabled+0x41/0x280 [ 672.046580] ? check_preemption_disabled+0x41/0x280 [ 672.046625] ? __fget+0x356/0x510 [ 672.071292] ? do_dup2+0x450/0x450 [ 672.074842] ? lock_downgrade+0x720/0x720 [ 672.079011] ? vfs_write+0x3d7/0x540 [ 672.082762] ? __fdget+0x1d0/0x230 [ 672.086353] __x64_sys_sendmsg+0x132/0x220 [ 672.090621] ? __sys_sendmsg+0x1b0/0x1b0 [ 672.094693] ? vfs_write+0x393/0x540 [ 672.098452] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 672.103837] ? trace_hardirqs_off_caller+0x6e/0x210 [ 672.108869] ? do_syscall_64+0x21/0x620 [ 672.112884] do_syscall_64+0xf9/0x620 [ 672.116727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.121932] RIP: 0033:0x7f6e9b735eb9 [ 672.125655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.144567] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.152304] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 672.159596] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 09:32:23 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xa000000}}, 0x1c) 09:32:23 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006050300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006050300000000fe880000000000000000000000000001fe880000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x6, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) [ 672.166880] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.174168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.181541] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 [ 672.200892] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.214543] CPU: 1 PID: 6073 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 672.222350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.231706] Call Trace: [ 672.234305] dump_stack+0x1fc/0x2ef [ 672.237943] should_fail.cold+0xa/0xf [ 672.241755] ? setup_fault_attr+0x200/0x200 [ 672.246091] ? lock_acquire+0x170/0x3c0 [ 672.250079] __should_failslab+0x115/0x180 [ 672.254342] should_failslab+0x5/0x10 [ 672.258154] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 672.263270] blk_throtl_init+0x7c/0x620 [ 672.267246] ? blk_iolatency_init+0x1b7/0x2d0 [ 672.271746] blkcg_init_queue+0x1e3/0x540 [ 672.275897] blk_alloc_queue_node+0x7d0/0xbf0 [ 672.280401] blk_mq_init_queue+0x44/0xa0 [ 672.284467] loop_add+0x2cb/0x8a0 [ 672.287931] loop_control_ioctl+0x16c/0x480 [ 672.292256] ? loop_lookup+0x1d0/0x1d0 [ 672.296154] ? HARDIRQ_verbose+0x10/0x10 [ 672.300220] ? ksys_write+0x241/0x2a0 [ 672.304027] ? loop_lookup+0x1d0/0x1d0 [ 672.307919] do_vfs_ioctl+0xcdb/0x12e0 [ 672.311809] ? lock_downgrade+0x720/0x720 [ 672.315962] ? check_preemption_disabled+0x41/0x280 [ 672.320985] ? ioctl_preallocate+0x200/0x200 [ 672.325408] ? __fget+0x356/0x510 [ 672.328868] ? do_dup2+0x450/0x450 [ 672.332410] ? vfs_write+0x393/0x540 [ 672.336132] ? fput+0x2b/0x190 [ 672.339341] ksys_ioctl+0x9b/0xc0 [ 672.342801] __x64_sys_ioctl+0x6f/0xb0 [ 672.346693] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 672.351277] do_syscall_64+0xf9/0x620 [ 672.355090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.360281] RIP: 0033:0x7fa68977eeb9 [ 672.363992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.382891] RSP: 002b:00007fa6880d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.390601] RAX: ffffffffffffffda RBX: 00007fa689892030 RCX: 00007fa68977eeb9 [ 672.397871] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 672.405135] RBP: 00007fa6880d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.412403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:23 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe000000}}, 0x1c) 09:32:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 4) [ 672.419668] R13: 00007ffc497425cf R14: 00007fa6880d3300 R15: 0000000000022000 09:32:23 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 26) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:23 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 672.592006] FAULT_INJECTION: forcing a failure. [ 672.592006] name failslab, interval 1, probability 0, space 0, times 0 [ 672.603334] CPU: 0 PID: 6090 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 672.611154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.620528] Call Trace: [ 672.623150] dump_stack+0x1fc/0x2ef [ 672.626820] should_fail.cold+0xa/0xf [ 672.630662] ? setup_fault_attr+0x200/0x200 [ 672.635014] ? HARDIRQ_verbose+0x10/0x10 09:32:23 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x20000000}}, 0x1c) [ 672.639098] ? skb_network_protocol+0x14b/0x570 [ 672.643794] ? perf_trace_run_bpf_submit+0x144/0x220 [ 672.645008] FAULT_INJECTION: forcing a failure. [ 672.645008] name failslab, interval 1, probability 0, space 0, times 0 [ 672.648936] __should_failslab+0x115/0x180 [ 672.648969] should_failslab+0x5/0x10 [ 672.648994] kmem_cache_alloc+0x3f/0x370 [ 672.672272] skb_clone+0x151/0x3d0 [ 672.675843] dev_queue_xmit_nit+0x326/0xa20 [ 672.680187] ? validate_xmit_xfrm+0x3dc/0xe30 [ 672.684709] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.690120] dev_hard_start_xmit+0xaa/0x920 [ 672.694470] ? validate_xmit_skb+0x764/0xd50 [ 672.698921] __dev_queue_xmit+0x269d/0x2e00 [ 672.703278] ? memcpy+0x35/0x50 [ 672.706574] ? netdev_pick_tx+0x2f0/0x2f0 [ 672.710730] ? __copy_skb_header+0x414/0x500 [ 672.715162] ? kfree_skbmem+0x140/0x140 [ 672.719171] ? skb_clone+0x151/0x3d0 [ 672.722919] ? __skb_clone+0x5ce/0x7c0 [ 672.726821] ? kmem_cache_alloc+0x315/0x370 [ 672.731193] netlink_deliver_tap+0x8fb/0xb00 [ 672.735640] netlink_unicast+0x545/0x690 [ 672.739729] ? netlink_sendskb+0x110/0x110 [ 672.743977] ? _copy_from_iter_full+0x229/0x7c0 [ 672.748663] ? __phys_addr_symbol+0x2c/0x70 [ 672.753003] ? __check_object_size+0x17b/0x3e0 [ 672.757620] netlink_sendmsg+0x6c3/0xc50 [ 672.761709] ? aa_af_perm+0x230/0x230 [ 672.765528] ? nlmsg_notify+0x1f0/0x1f0 [ 672.769512] ? kernel_recvmsg+0x220/0x220 [ 672.773692] ? nlmsg_notify+0x1f0/0x1f0 [ 672.777683] sock_sendmsg+0xc3/0x120 [ 672.781425] ___sys_sendmsg+0x7bb/0x8e0 [ 672.785419] ? copy_msghdr_from_user+0x440/0x440 [ 672.790192] ? __fget+0x32f/0x510 [ 672.793671] ? lock_downgrade+0x720/0x720 [ 672.797836] ? check_preemption_disabled+0x41/0x280 [ 672.802873] ? check_preemption_disabled+0x41/0x280 [ 672.807931] ? __fget+0x356/0x510 [ 672.811417] ? do_dup2+0x450/0x450 [ 672.814980] ? lock_downgrade+0x720/0x720 [ 672.819152] ? vfs_write+0x3d7/0x540 [ 672.822890] ? __fdget+0x1d0/0x230 [ 672.826458] __x64_sys_sendmsg+0x132/0x220 [ 672.830717] ? __sys_sendmsg+0x1b0/0x1b0 [ 672.834792] ? vfs_write+0x393/0x540 [ 672.838551] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 672.843927] ? trace_hardirqs_off_caller+0x6e/0x210 [ 672.848956] ? do_syscall_64+0x21/0x620 [ 672.852951] do_syscall_64+0xf9/0x620 [ 672.856772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.861980] RIP: 0033:0x7f6e9b735eb9 [ 672.865702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.884609] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.892328] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 672.899614] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 672.906899] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.914180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.921453] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 [ 672.928782] CPU: 1 PID: 6098 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 672.936583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.945934] Call Trace: [ 672.948543] dump_stack+0x1fc/0x2ef [ 672.952187] should_fail.cold+0xa/0xf [ 672.956001] ? setup_fault_attr+0x200/0x200 [ 672.960335] ? lock_acquire+0x170/0x3c0 [ 672.964322] __should_failslab+0x115/0x180 [ 672.968564] should_failslab+0x5/0x10 [ 672.972367] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 672.977472] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 672.981889] throtl_pd_alloc+0x6b/0x940 [ 672.985866] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 672.990280] blkcg_activate_policy+0x120/0x5d0 [ 672.994873] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.999894] ? init_timer_key+0x88/0x350 [ 673.003971] blk_throtl_init+0x40d/0x620 [ 673.008036] ? blk_iolatency_init+0x1b7/0x2d0 [ 673.012539] blkcg_init_queue+0x1e3/0x540 [ 673.016697] blk_alloc_queue_node+0x7d0/0xbf0 [ 673.021204] blk_mq_init_queue+0x44/0xa0 [ 673.025271] loop_add+0x2cb/0x8a0 [ 673.028741] loop_control_ioctl+0x16c/0x480 [ 673.033068] ? loop_lookup+0x1d0/0x1d0 [ 673.036969] ? HARDIRQ_verbose+0x10/0x10 [ 673.041036] ? ksys_write+0x241/0x2a0 [ 673.044841] ? loop_lookup+0x1d0/0x1d0 [ 673.048748] do_vfs_ioctl+0xcdb/0x12e0 [ 673.052649] ? lock_downgrade+0x720/0x720 [ 673.056805] ? check_preemption_disabled+0x41/0x280 [ 673.061826] ? ioctl_preallocate+0x200/0x200 [ 673.066246] ? __fget+0x356/0x510 [ 673.069709] ? do_dup2+0x450/0x450 [ 673.073254] ? vfs_write+0x393/0x540 [ 673.076978] ? fput+0x2b/0x190 [ 673.080186] ksys_ioctl+0x9b/0xc0 [ 673.083647] __x64_sys_ioctl+0x6f/0xb0 [ 673.087539] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 673.092121] do_syscall_64+0xf9/0x620 [ 673.095933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.101138] RIP: 0033:0x7fa68977eeb9 [ 673.104856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.123756] RSP: 002b:00007fa6880d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.131464] RAX: ffffffffffffffda RBX: 00007fa689892030 RCX: 00007fa68977eeb9 09:32:24 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3a, 0x2, 0x0) 09:32:24 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 673.138734] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 673.146005] RBP: 00007fa6880d31d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.153275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.160545] R13: 00007ffc497425cf R14: 00007fa6880d3300 R15: 0000000000022000 09:32:24 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 27) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:24 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40000000}}, 0x1c) [ 673.301411] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 673.336829] FAULT_INJECTION: forcing a failure. [ 673.336829] name failslab, interval 1, probability 0, space 0, times 0 [ 673.348050] CPU: 1 PID: 6130 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 673.355845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.365201] Call Trace: [ 673.367799] dump_stack+0x1fc/0x2ef [ 673.371439] should_fail.cold+0xa/0xf [ 673.375251] ? setup_fault_attr+0x200/0x200 [ 673.379582] ? lock_acquire+0x170/0x3c0 [ 673.383565] ? check_preemption_disabled+0x41/0x280 [ 673.388594] __should_failslab+0x115/0x180 [ 673.392837] should_failslab+0x5/0x10 [ 673.396641] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 673.401662] throtl_pd_alloc+0x6b/0x940 [ 673.405645] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 673.410059] blkcg_activate_policy+0x249/0x5d0 [ 673.414656] blk_throtl_init+0x40d/0x620 [ 673.418716] ? blk_iolatency_init+0x1b7/0x2d0 [ 673.423227] blkcg_init_queue+0x1e3/0x540 [ 673.427384] blk_alloc_queue_node+0x7d0/0xbf0 [ 673.431889] blk_mq_init_queue+0x44/0xa0 [ 673.435961] loop_add+0x2cb/0x8a0 [ 673.439423] loop_control_ioctl+0x16c/0x480 [ 673.443746] ? loop_lookup+0x1d0/0x1d0 [ 673.447635] ? HARDIRQ_verbose+0x10/0x10 [ 673.451724] ? ksys_write+0x241/0x2a0 [ 673.455532] ? loop_lookup+0x1d0/0x1d0 [ 673.459425] do_vfs_ioctl+0xcdb/0x12e0 [ 673.463320] ? lock_downgrade+0x720/0x720 [ 673.467477] ? check_preemption_disabled+0x41/0x280 [ 673.472496] ? ioctl_preallocate+0x200/0x200 [ 673.476911] ? __fget+0x356/0x510 [ 673.480463] ? do_dup2+0x450/0x450 [ 673.484008] ? vfs_write+0x393/0x540 [ 673.487723] ? fput+0x2b/0x190 [ 673.490932] ksys_ioctl+0x9b/0xc0 [ 673.494393] __x64_sys_ioctl+0x6f/0xb0 09:32:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 5) [ 673.498283] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 673.502866] do_syscall_64+0xf9/0x620 [ 673.506673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.511861] RIP: 0033:0x7fa68977eeb9 [ 673.515574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.534474] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.542182] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:24 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x58000000}}, 0x1c) [ 673.549450] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 673.556716] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.563986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.571254] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:24 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 28) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 673.704331] FAULT_INJECTION: forcing a failure. [ 673.704331] name failslab, interval 1, probability 0, space 0, times 0 [ 673.715738] CPU: 0 PID: 6147 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 673.723568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.732944] Call Trace: [ 673.735561] dump_stack+0x1fc/0x2ef [ 673.735960] FAULT_INJECTION: forcing a failure. [ 673.735960] name failslab, interval 1, probability 0, space 0, times 0 [ 673.739221] should_fail.cold+0xa/0xf [ 673.739245] ? HARDIRQ_verbose+0x10/0x10 [ 673.739268] ? setup_fault_attr+0x200/0x200 [ 673.739294] ? run_filter+0x1bd/0x310 [ 673.766458] __should_failslab+0x115/0x180 [ 673.770729] should_failslab+0x5/0x10 [ 673.774555] kmem_cache_alloc+0x3f/0x370 [ 673.778645] skb_clone+0x151/0x3d0 [ 673.782216] packet_rcv+0xf53/0x1490 [ 673.785960] ? run_filter+0x310/0x310 [ 673.789782] dev_queue_xmit_nit+0x24d/0xa20 [ 673.794155] dev_hard_start_xmit+0xaa/0x920 [ 673.798496] ? validate_xmit_skb+0x764/0xd50 [ 673.802937] __dev_queue_xmit+0x269d/0x2e00 [ 673.807302] ? memcpy+0x35/0x50 [ 673.810605] ? netdev_pick_tx+0x2f0/0x2f0 [ 673.814769] ? __copy_skb_header+0x414/0x500 [ 673.819203] ? kfree_skbmem+0x140/0x140 [ 673.823205] ? skb_clone+0x151/0x3d0 [ 673.826945] ? __skb_clone+0x5ce/0x7c0 [ 673.830837] ? kmem_cache_alloc+0x315/0x370 [ 673.835195] netlink_deliver_tap+0x8fb/0xb00 [ 673.839641] netlink_unicast+0x545/0x690 [ 673.843728] ? netlink_sendskb+0x110/0x110 [ 673.847978] ? _copy_from_iter_full+0x229/0x7c0 [ 673.852660] ? __phys_addr_symbol+0x2c/0x70 [ 673.856995] ? __check_object_size+0x17b/0x3e0 [ 673.861605] netlink_sendmsg+0x6c3/0xc50 [ 673.865688] ? aa_af_perm+0x230/0x230 [ 673.869508] ? nlmsg_notify+0x1f0/0x1f0 [ 673.873493] ? kernel_recvmsg+0x220/0x220 [ 673.877672] ? nlmsg_notify+0x1f0/0x1f0 [ 673.881668] sock_sendmsg+0xc3/0x120 [ 673.885404] ___sys_sendmsg+0x7bb/0x8e0 [ 673.889402] ? copy_msghdr_from_user+0x440/0x440 [ 673.894176] ? __fget+0x32f/0x510 [ 673.897654] ? lock_downgrade+0x720/0x720 [ 673.901825] ? check_preemption_disabled+0x41/0x280 [ 673.906883] ? check_preemption_disabled+0x41/0x280 [ 673.911936] ? __fget+0x356/0x510 [ 673.915420] ? do_dup2+0x450/0x450 [ 673.918972] ? lock_downgrade+0x720/0x720 [ 673.923143] ? vfs_write+0x3d7/0x540 [ 673.926895] ? __fdget+0x1d0/0x230 [ 673.930480] __x64_sys_sendmsg+0x132/0x220 [ 673.934735] ? __sys_sendmsg+0x1b0/0x1b0 [ 673.938808] ? vfs_write+0x393/0x540 [ 673.942578] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 673.947959] ? trace_hardirqs_off_caller+0x6e/0x210 [ 673.952991] ? do_syscall_64+0x21/0x620 [ 673.956991] do_syscall_64+0xf9/0x620 [ 673.960816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.966015] RIP: 0033:0x7f6e9b735eb9 [ 673.969751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.988671] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.996398] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 674.003684] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 674.010970] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.018258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.025542] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 [ 674.032874] CPU: 1 PID: 6149 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 674.040672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.050022] Call Trace: [ 674.052621] dump_stack+0x1fc/0x2ef [ 674.056257] should_fail.cold+0xa/0xf [ 674.060064] ? setup_fault_attr+0x200/0x200 [ 674.063847] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 674.064386] ? lock_acquire+0x170/0x3c0 [ 674.064407] __should_failslab+0x115/0x180 [ 674.081243] should_failslab+0x5/0x10 [ 674.085047] kmem_cache_alloc_trace+0x284/0x380 [ 674.089728] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 674.094749] ? plug_ctx_cmp+0x100/0x100 [ 674.098725] blk_stat_alloc_callback+0x54/0x290 [ 674.103408] blk_mq_init_allocated_queue+0x80/0x1300 [ 674.108513] ? blkcg_init_queue+0x1fd/0x540 [ 674.112842] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 674.117628] blk_mq_init_queue+0x5c/0xa0 [ 674.121698] loop_add+0x2cb/0x8a0 [ 674.125164] loop_control_ioctl+0x16c/0x480 [ 674.129496] ? loop_lookup+0x1d0/0x1d0 [ 674.133394] ? HARDIRQ_verbose+0x10/0x10 [ 674.137463] ? ksys_write+0x241/0x2a0 [ 674.141271] ? loop_lookup+0x1d0/0x1d0 [ 674.145169] do_vfs_ioctl+0xcdb/0x12e0 [ 674.149061] ? lock_downgrade+0x720/0x720 [ 674.153216] ? check_preemption_disabled+0x41/0x280 [ 674.158243] ? ioctl_preallocate+0x200/0x200 [ 674.162660] ? __fget+0x356/0x510 [ 674.166118] ? do_dup2+0x450/0x450 [ 674.169659] ? vfs_write+0x393/0x540 [ 674.173381] ? fput+0x2b/0x190 [ 674.176587] ksys_ioctl+0x9b/0xc0 [ 674.180055] __x64_sys_ioctl+0x6f/0xb0 [ 674.183948] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 674.188528] do_syscall_64+0xf9/0x620 [ 674.192345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.197540] RIP: 0033:0x7fa68977eeb9 [ 674.201257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.220160] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.227878] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 674.235149] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 674.242411] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.249671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:25 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:25 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x60000000}}, 0x1c) 09:32:25 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 674.256931] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 6) 09:32:25 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3b, 0x2, 0x0) 09:32:25 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 29) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 674.427001] FAULT_INJECTION: forcing a failure. [ 674.427001] name failslab, interval 1, probability 0, space 0, times 0 [ 674.454021] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 674.455714] CPU: 1 PID: 6174 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 674.470513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.479867] Call Trace: [ 674.481683] FAULT_INJECTION: forcing a failure. [ 674.481683] name failslab, interval 1, probability 0, space 0, times 0 [ 674.482462] dump_stack+0x1fc/0x2ef [ 674.497263] should_fail.cold+0xa/0xf [ 674.501078] ? setup_fault_attr+0x200/0x200 [ 674.505406] ? lock_acquire+0x170/0x3c0 [ 674.509391] __should_failslab+0x115/0x180 [ 674.513632] should_failslab+0x5/0x10 [ 674.517426] kmem_cache_alloc_trace+0x284/0x380 [ 674.522103] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 674.527122] ? plug_ctx_cmp+0x100/0x100 [ 674.531092] blk_stat_alloc_callback+0x54/0x290 [ 674.535780] blk_mq_init_allocated_queue+0x80/0x1300 [ 674.540881] ? blkcg_init_queue+0x1fd/0x540 [ 674.545200] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 674.549868] blk_mq_init_queue+0x5c/0xa0 [ 674.553923] loop_add+0x2cb/0x8a0 [ 674.557383] loop_control_ioctl+0x16c/0x480 [ 674.561709] ? loop_lookup+0x1d0/0x1d0 [ 674.565603] ? HARDIRQ_verbose+0x10/0x10 [ 674.569665] ? loop_lookup+0x1d0/0x1d0 [ 674.573553] do_vfs_ioctl+0xcdb/0x12e0 [ 674.577442] ? lock_downgrade+0x720/0x720 [ 674.581604] ? check_preemption_disabled+0x41/0x280 [ 674.586621] ? ioctl_preallocate+0x200/0x200 [ 674.591032] ? __fget+0x356/0x510 [ 674.594487] ? do_dup2+0x450/0x450 [ 674.598028] ? vfs_write+0x393/0x540 [ 674.601738] ? fput+0x2b/0x190 [ 674.604933] ksys_ioctl+0x9b/0xc0 [ 674.608385] __x64_sys_ioctl+0x6f/0xb0 [ 674.612264] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 674.616839] do_syscall_64+0xf9/0x620 [ 674.620636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.625818] RIP: 0033:0x7fa68977eeb9 [ 674.629526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.648416] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.656113] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 674.663374] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 674.670639] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.677897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 674.685155] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 674.692439] CPU: 0 PID: 6176 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 674.700262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.709741] Call Trace: [ 674.712361] dump_stack+0x1fc/0x2ef [ 674.716033] should_fail.cold+0xa/0xf [ 674.719871] ? setup_fault_attr+0x200/0x200 [ 674.724223] ? lock_acquire+0x170/0x3c0 [ 674.728251] __should_failslab+0x115/0x180 [ 674.732518] should_failslab+0x5/0x10 [ 674.736355] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 674.741507] __kmalloc_node+0x38/0x70 [ 674.745348] kvmalloc_node+0x61/0xf0 [ 674.749093] get_dist_table+0x8e/0x2d0 [ 674.753023] netem_change+0x573/0x1a70 [ 674.756954] ? apparmor_capable+0x147/0x750 [ 674.761306] ? netem_walk+0x1b0/0x1b0 [ 674.765134] ? apparmor_sb_mount+0x970/0x970 [ 674.769571] ? apparmor_sb_mount+0x970/0x970 [ 674.774060] ? nla_strcmp+0xfa/0x130 [ 674.777803] ? netem_walk+0x1b0/0x1b0 [ 674.781642] tc_modify_qdisc+0xf6a/0x1a80 [ 674.785849] ? tc_get_qdisc+0xb60/0xb60 [ 674.789855] ? rtnetlink_rcv_msg+0x3fe/0xb80 [ 674.794363] ? tc_get_qdisc+0xb60/0xb60 [ 674.798369] rtnetlink_rcv_msg+0x453/0xb80 [ 674.802641] ? rtnl_calcit.isra.0+0x430/0x430 [ 674.807172] ? memcpy+0x35/0x50 [ 674.810483] ? netdev_pick_tx+0x2f0/0x2f0 [ 674.814658] ? __copy_skb_header+0x414/0x500 [ 674.819099] ? kfree_skbmem+0x140/0x140 [ 674.823117] netlink_rcv_skb+0x160/0x440 [ 674.827217] ? rtnl_calcit.isra.0+0x430/0x430 [ 674.831753] ? netlink_ack+0xae0/0xae0 [ 674.835718] netlink_unicast+0x4d5/0x690 [ 674.839821] ? netlink_sendskb+0x110/0x110 [ 674.844089] ? _copy_from_iter_full+0x229/0x7c0 [ 674.848782] ? __phys_addr_symbol+0x2c/0x70 [ 674.853134] ? __check_object_size+0x17b/0x3e0 [ 674.857752] netlink_sendmsg+0x6c3/0xc50 [ 674.861865] ? aa_af_perm+0x230/0x230 [ 674.865691] ? nlmsg_notify+0x1f0/0x1f0 [ 674.869688] ? kernel_recvmsg+0x220/0x220 [ 674.873894] ? nlmsg_notify+0x1f0/0x1f0 [ 674.877900] sock_sendmsg+0xc3/0x120 [ 674.881644] ___sys_sendmsg+0x7bb/0x8e0 [ 674.885655] ? copy_msghdr_from_user+0x440/0x440 [ 674.890449] ? __fget+0x32f/0x510 [ 674.893950] ? lock_downgrade+0x720/0x720 [ 674.898127] ? check_preemption_disabled+0x41/0x280 [ 674.903177] ? check_preemption_disabled+0x41/0x280 [ 674.908237] ? __fget+0x356/0x510 [ 674.911736] ? do_dup2+0x450/0x450 [ 674.915310] ? lock_downgrade+0x720/0x720 [ 674.919491] ? vfs_write+0x3d7/0x540 [ 674.923253] ? __fdget+0x1d0/0x230 [ 674.926847] __x64_sys_sendmsg+0x132/0x220 [ 674.931113] ? __sys_sendmsg+0x1b0/0x1b0 [ 674.935209] ? vfs_write+0x393/0x540 [ 674.938985] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 674.944377] ? trace_hardirqs_off_caller+0x6e/0x210 [ 674.949422] ? do_syscall_64+0x21/0x620 [ 674.953438] do_syscall_64+0xf9/0x620 [ 674.957279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.962495] RIP: 0033:0x7f6e9b735eb9 09:32:25 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 30) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:25 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8aaaffff}}, 0x1c) 09:32:26 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8dffffff}}, 0x1c) 09:32:26 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe8030000}}, 0x1c) [ 674.966230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.985154] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.992888] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 675.000181] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 675.007482] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 675.014785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.022085] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 [ 675.063739] FAULT_INJECTION: forcing a failure. [ 675.063739] name failslab, interval 1, probability 0, space 0, times 0 [ 675.077364] CPU: 0 PID: 6201 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 675.085197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.094575] Call Trace: [ 675.097193] dump_stack+0x1fc/0x2ef [ 675.100864] should_fail.cold+0xa/0xf [ 675.104692] ? setup_fault_attr+0x200/0x200 [ 675.109039] ? lock_acquire+0x170/0x3c0 09:32:26 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf4010000}}, 0x1c) [ 675.113068] __should_failslab+0x115/0x180 [ 675.117341] should_failslab+0x5/0x10 [ 675.121167] __kmalloc+0x2ab/0x3c0 [ 675.124732] ? blk_stat_alloc_callback+0x81/0x290 [ 675.129611] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 675.134649] ? plug_ctx_cmp+0x100/0x100 [ 675.138651] blk_stat_alloc_callback+0x81/0x290 [ 675.143363] blk_mq_init_allocated_queue+0x80/0x1300 [ 675.148490] ? blkcg_init_queue+0x1fd/0x540 [ 675.152850] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 675.157567] blk_mq_init_queue+0x5c/0xa0 09:32:26 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 32) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 64) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async, rerun: 64) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 675.161660] loop_add+0x2cb/0x8a0 [ 675.165132] loop_control_ioctl+0x16c/0x480 [ 675.169470] ? loop_lookup+0x1d0/0x1d0 [ 675.173367] ? HARDIRQ_verbose+0x10/0x10 [ 675.177427] ? loop_lookup+0x1d0/0x1d0 [ 675.181317] do_vfs_ioctl+0xcdb/0x12e0 [ 675.185204] ? lock_downgrade+0x720/0x720 [ 675.189353] ? check_preemption_disabled+0x41/0x280 [ 675.194370] ? ioctl_preallocate+0x200/0x200 [ 675.198809] ? __fget+0x356/0x510 [ 675.202309] ? do_dup2+0x450/0x450 [ 675.205876] ? vfs_write+0x393/0x540 [ 675.209619] ? fput+0x2b/0x190 [ 675.212825] ksys_ioctl+0x9b/0xc0 [ 675.216279] __x64_sys_ioctl+0x6f/0xb0 [ 675.220181] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 675.224783] do_syscall_64+0xf9/0x620 [ 675.228603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.233793] RIP: 0033:0x7fa68977eeb9 [ 675.237496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.256414] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:32:26 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3c, 0x2, 0x0) 09:32:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 7) [ 675.264144] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 675.271425] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 675.278703] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 675.285976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.293253] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:26 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 31) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 675.470516] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:26 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9d53e287189a86dd60c7d50400683a0000000000000000eb0000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000010000fe8000000000000000000000000000aa0006040300000000fe9c000000000000000000000000000100000000000005000000ffff00000000000000"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x2, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 675.534794] FAULT_INJECTION: forcing a failure. [ 675.534794] name failslab, interval 1, probability 0, space 0, times 0 [ 675.583898] FAULT_INJECTION: forcing a failure. [ 675.583898] name failslab, interval 1, probability 0, space 0, times 0 [ 675.604738] CPU: 0 PID: 6215 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 675.612584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.621964] Call Trace: [ 675.624590] dump_stack+0x1fc/0x2ef [ 675.628271] should_fail.cold+0xa/0xf [ 675.632108] ? setup_fault_attr+0x200/0x200 [ 675.636461] ? lock_acquire+0x170/0x3c0 [ 675.640497] __should_failslab+0x115/0x180 [ 675.644772] should_failslab+0x5/0x10 [ 675.648597] kmem_cache_alloc_node+0x245/0x3b0 [ 675.653225] __alloc_skb+0x71/0x560 [ 675.656907] qdisc_notify.isra.0+0x7f/0x320 [ 675.661279] tc_modify_qdisc+0x1197/0x1a80 [ 675.665577] ? tc_get_qdisc+0xb60/0xb60 [ 675.669579] ? rtnetlink_rcv_msg+0x3fe/0xb80 [ 675.674085] ? tc_get_qdisc+0xb60/0xb60 [ 675.678082] rtnetlink_rcv_msg+0x453/0xb80 [ 675.682347] ? rtnl_calcit.isra.0+0x430/0x430 [ 675.686867] ? memcpy+0x35/0x50 [ 675.690157] ? netdev_pick_tx+0x2f0/0x2f0 [ 675.694314] ? __copy_skb_header+0x414/0x500 [ 675.698746] ? kfree_skbmem+0x140/0x140 [ 675.702753] netlink_rcv_skb+0x160/0x440 [ 675.706828] ? rtnl_calcit.isra.0+0x430/0x430 [ 675.711344] ? netlink_ack+0xae0/0xae0 [ 675.715286] netlink_unicast+0x4d5/0x690 [ 675.719375] ? netlink_sendskb+0x110/0x110 [ 675.723624] ? _copy_from_iter_full+0x229/0x7c0 [ 675.728313] ? __phys_addr_symbol+0x2c/0x70 [ 675.732646] ? __check_object_size+0x17b/0x3e0 [ 675.737337] netlink_sendmsg+0x6c3/0xc50 [ 675.741515] ? aa_af_perm+0x230/0x230 [ 675.745328] ? nlmsg_notify+0x1f0/0x1f0 [ 675.749311] ? kernel_recvmsg+0x220/0x220 [ 675.753507] ? nlmsg_notify+0x1f0/0x1f0 [ 675.757502] sock_sendmsg+0xc3/0x120 [ 675.761243] ___sys_sendmsg+0x7bb/0x8e0 [ 675.765259] ? copy_msghdr_from_user+0x440/0x440 [ 675.770052] ? __fget+0x32f/0x510 [ 675.773539] ? lock_downgrade+0x720/0x720 [ 675.777708] ? check_preemption_disabled+0x41/0x280 [ 675.782747] ? check_preemption_disabled+0x41/0x280 [ 675.787796] ? __fget+0x356/0x510 [ 675.791276] ? do_dup2+0x450/0x450 [ 675.794826] ? lock_downgrade+0x720/0x720 [ 675.798998] ? vfs_write+0x3d7/0x540 [ 675.802749] ? __fdget+0x1d0/0x230 [ 675.806334] __x64_sys_sendmsg+0x132/0x220 [ 675.810585] ? __sys_sendmsg+0x1b0/0x1b0 [ 675.814651] ? vfs_write+0x393/0x540 [ 675.818406] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 675.823786] ? trace_hardirqs_off_caller+0x6e/0x210 [ 675.828818] ? do_syscall_64+0x21/0x620 [ 675.832810] do_syscall_64+0xf9/0x620 [ 675.836634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.841837] RIP: 0033:0x7f6e9b735eb9 [ 675.845555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.864462] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.872179] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 675.879453] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 675.886730] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 675.894008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.901283] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 [ 675.908618] CPU: 1 PID: 6234 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 675.916420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.925773] Call Trace: [ 675.928366] dump_stack+0x1fc/0x2ef [ 675.932006] should_fail.cold+0xa/0xf [ 675.935814] ? setup_fault_attr+0x200/0x200 [ 675.940145] ? lock_acquire+0x170/0x3c0 [ 675.944137] __should_failslab+0x115/0x180 [ 675.948388] should_failslab+0x5/0x10 [ 675.952193] __kmalloc+0x2ab/0x3c0 [ 675.955737] ? blk_stat_alloc_callback+0x81/0x290 [ 675.960594] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 675.965615] ? plug_ctx_cmp+0x100/0x100 [ 675.969598] blk_stat_alloc_callback+0x81/0x290 [ 675.974279] blk_mq_init_allocated_queue+0x80/0x1300 [ 675.979378] ? blkcg_init_queue+0x1fd/0x540 [ 675.983686] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 675.988343] blk_mq_init_queue+0x5c/0xa0 [ 675.992406] loop_add+0x2cb/0x8a0 [ 675.995873] loop_control_ioctl+0x16c/0x480 [ 676.000193] ? loop_lookup+0x1d0/0x1d0 [ 676.004066] ? HARDIRQ_verbose+0x10/0x10 [ 676.008129] ? loop_lookup+0x1d0/0x1d0 [ 676.012015] do_vfs_ioctl+0xcdb/0x12e0 [ 676.015893] ? lock_downgrade+0x720/0x720 [ 676.020034] ? check_preemption_disabled+0x41/0x280 [ 676.025053] ? ioctl_preallocate+0x200/0x200 [ 676.029467] ? __fget+0x356/0x510 [ 676.032912] ? do_dup2+0x450/0x450 [ 676.036447] ? vfs_write+0x393/0x540 [ 676.040158] ? fput+0x2b/0x190 [ 676.043352] ksys_ioctl+0x9b/0xc0 [ 676.046798] __x64_sys_ioctl+0x6f/0xb0 [ 676.050682] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 676.055258] do_syscall_64+0xf9/0x620 [ 676.059057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.064230] RIP: 0033:0x7fa68977eeb9 [ 676.067931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 676.086816] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.094508] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 676.101768] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 676.109038] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 676.116300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 676.123560] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:27 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff}}, 0x1c) 09:32:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 8) 09:32:27 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:27 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 32) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:27 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3d, 0x2, 0x0) [ 676.368407] FAULT_INJECTION: forcing a failure. [ 676.368407] name failslab, interval 1, probability 0, space 0, times 0 [ 676.383864] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 676.399185] FAULT_INJECTION: forcing a failure. [ 676.399185] name failslab, interval 1, probability 0, space 0, times 0 [ 676.400665] CPU: 0 PID: 6257 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 676.418198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.427569] Call Trace: [ 676.430188] dump_stack+0x1fc/0x2ef [ 676.433855] should_fail.cold+0xa/0xf [ 676.437685] ? setup_fault_attr+0x200/0x200 [ 676.442019] ? lock_acquire+0x170/0x3c0 [ 676.446028] __should_failslab+0x115/0x180 [ 676.450277] should_failslab+0x5/0x10 [ 676.454088] __kmalloc+0x2ab/0x3c0 [ 676.457640] ? blk_stat_alloc_callback+0x81/0x290 [ 676.462512] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 09:32:27 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9d53e287189a86dd60c7d50400683a0000000000000000eb0000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000010000fe8000000000000000000000000000aa0006040300000000fe9c000000000000000000000000000100000000000005000000ffff00000000000000"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 64) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x2, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 676.467549] ? plug_ctx_cmp+0x100/0x100 [ 676.471539] blk_stat_alloc_callback+0x81/0x290 [ 676.476238] blk_mq_init_allocated_queue+0x80/0x1300 [ 676.481350] ? blkcg_init_queue+0x1fd/0x540 [ 676.485694] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 676.490387] blk_mq_init_queue+0x5c/0xa0 [ 676.494467] loop_add+0x2cb/0x8a0 [ 676.497948] loop_control_ioctl+0x16c/0x480 [ 676.502284] ? loop_lookup+0x1d0/0x1d0 [ 676.506197] ? HARDIRQ_verbose+0x10/0x10 [ 676.510293] ? loop_lookup+0x1d0/0x1d0 [ 676.514205] do_vfs_ioctl+0xcdb/0x12e0 [ 676.518112] ? lock_downgrade+0x720/0x720 [ 676.522285] ? check_preemption_disabled+0x41/0x280 [ 676.527320] ? ioctl_preallocate+0x200/0x200 [ 676.531754] ? __fget+0x356/0x510 [ 676.535232] ? do_dup2+0x450/0x450 [ 676.538782] ? vfs_write+0x393/0x540 [ 676.542515] ? fput+0x2b/0x190 [ 676.545739] ksys_ioctl+0x9b/0xc0 [ 676.549210] __x64_sys_ioctl+0x6f/0xb0 [ 676.553111] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 676.557708] do_syscall_64+0xf9/0x620 [ 676.561527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.566725] RIP: 0033:0x7fa68977eeb9 [ 676.570443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 676.589354] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.597068] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 676.604344] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 676.611622] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 676.618896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 676.626173] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 676.633502] CPU: 1 PID: 6258 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 676.641302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.650653] Call Trace: [ 676.653252] dump_stack+0x1fc/0x2ef [ 676.656897] should_fail.cold+0xa/0xf [ 676.660711] ? setup_fault_attr+0x200/0x200 [ 676.665042] ? lock_acquire+0x170/0x3c0 [ 676.669031] __should_failslab+0x115/0x180 [ 676.673276] should_failslab+0x5/0x10 [ 676.677086] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 676.682199] __kmalloc_node_track_caller+0x38/0x70 [ 676.687136] __alloc_skb+0xae/0x560 [ 676.690769] qdisc_notify.isra.0+0x7f/0x320 [ 676.695103] tc_modify_qdisc+0x1197/0x1a80 [ 676.699353] ? tc_get_qdisc+0xb60/0xb60 [ 676.703334] ? rtnetlink_rcv_msg+0x3fe/0xb80 [ 676.707770] ? tc_get_qdisc+0xb60/0xb60 [ 676.711753] rtnetlink_rcv_msg+0x453/0xb80 [ 676.715998] ? rtnl_calcit.isra.0+0x430/0x430 [ 676.720503] ? memcpy+0x35/0x50 [ 676.723792] ? netdev_pick_tx+0x2f0/0x2f0 [ 676.727947] ? __copy_skb_header+0x414/0x500 [ 676.732365] ? kfree_skbmem+0x140/0x140 [ 676.736356] netlink_rcv_skb+0x160/0x440 [ 676.740428] ? rtnl_calcit.isra.0+0x430/0x430 [ 676.744933] ? netlink_ack+0xae0/0xae0 [ 676.748847] netlink_unicast+0x4d5/0x690 [ 676.752916] ? netlink_sendskb+0x110/0x110 [ 676.757157] ? _copy_from_iter_full+0x229/0x7c0 [ 676.761829] ? __phys_addr_symbol+0x2c/0x70 [ 676.766154] ? __check_object_size+0x17b/0x3e0 [ 676.770743] netlink_sendmsg+0x6c3/0xc50 [ 676.774812] ? aa_af_perm+0x230/0x230 [ 676.778619] ? nlmsg_notify+0x1f0/0x1f0 [ 676.782608] ? kernel_recvmsg+0x220/0x220 [ 676.786773] ? nlmsg_notify+0x1f0/0x1f0 [ 676.790758] sock_sendmsg+0xc3/0x120 [ 676.794477] ___sys_sendmsg+0x7bb/0x8e0 [ 676.798891] ? copy_msghdr_from_user+0x440/0x440 [ 676.803653] ? __fget+0x32f/0x510 [ 676.807117] ? lock_downgrade+0x720/0x720 [ 676.811269] ? check_preemption_disabled+0x41/0x280 [ 676.816291] ? check_preemption_disabled+0x41/0x280 [ 676.821315] ? __fget+0x356/0x510 [ 676.824777] ? do_dup2+0x450/0x450 [ 676.828318] ? lock_downgrade+0x720/0x720 [ 676.832470] ? vfs_write+0x3d7/0x540 [ 676.836192] ? __fdget+0x1d0/0x230 [ 676.839741] __x64_sys_sendmsg+0x132/0x220 [ 676.843978] ? __sys_sendmsg+0x1b0/0x1b0 [ 676.848038] ? vfs_write+0x393/0x540 [ 676.851769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 676.857137] ? trace_hardirqs_off_caller+0x6e/0x210 [ 676.862160] ? do_syscall_64+0x21/0x620 [ 676.866139] do_syscall_64+0xf9/0x620 [ 676.869951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.875140] RIP: 0033:0x7f6e9b735eb9 [ 676.878857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 676.897761] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.905474] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 676.912741] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 09:32:28 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc000000}}, 0x1c) [ 676.920013] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 676.927282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.934553] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 09:32:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 9) 09:32:28 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 33) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:28 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:28 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) [ 677.161424] FAULT_INJECTION: forcing a failure. [ 677.161424] name failslab, interval 1, probability 0, space 0, times 0 [ 677.177279] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 677.220704] FAULT_INJECTION: forcing a failure. [ 677.220704] name failslab, interval 1, probability 0, space 0, times 0 [ 677.238359] CPU: 0 PID: 6290 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 677.246200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.255575] Call Trace: [ 677.258198] dump_stack+0x1fc/0x2ef [ 677.261854] should_fail.cold+0xa/0xf [ 677.265684] ? setup_fault_attr+0x200/0x200 [ 677.270024] ? __debug_object_init+0x410/0x9b0 [ 677.274653] __should_failslab+0x115/0x180 [ 677.278904] should_failslab+0x5/0x10 [ 677.282712] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 677.287835] __kmalloc_node+0x38/0x70 [ 677.291655] blk_mq_realloc_hw_ctxs+0x568/0x1000 [ 677.296460] blk_mq_init_allocated_queue+0x20c/0x1300 [ 677.301663] ? blkcg_init_queue+0x1fd/0x540 [ 677.306024] blk_mq_init_queue+0x5c/0xa0 [ 677.310100] loop_add+0x2cb/0x8a0 [ 677.313613] loop_control_ioctl+0x16c/0x480 [ 677.317958] ? loop_lookup+0x1d0/0x1d0 [ 677.321868] ? HARDIRQ_verbose+0x10/0x10 [ 677.325948] ? loop_lookup+0x1d0/0x1d0 [ 677.329852] do_vfs_ioctl+0xcdb/0x12e0 [ 677.333759] ? lock_downgrade+0x720/0x720 [ 677.337924] ? check_preemption_disabled+0x41/0x280 [ 677.342952] ? ioctl_preallocate+0x200/0x200 [ 677.347388] ? __fget+0x356/0x510 [ 677.350859] ? do_dup2+0x450/0x450 [ 677.354407] ? vfs_write+0x393/0x540 [ 677.358145] ? fput+0x2b/0x190 [ 677.361368] ksys_ioctl+0x9b/0xc0 [ 677.364840] __x64_sys_ioctl+0x6f/0xb0 [ 677.368738] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 677.373331] do_syscall_64+0xf9/0x620 [ 677.377147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.382338] RIP: 0033:0x7fa68977eeb9 [ 677.386056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.404959] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.412675] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 677.419951] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 677.427224] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.434596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.441875] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 677.449196] CPU: 1 PID: 6288 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 677.456999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.466351] Call Trace: [ 677.468945] dump_stack+0x1fc/0x2ef [ 677.472581] should_fail.cold+0xa/0xf [ 677.476390] ? setup_fault_attr+0x200/0x200 [ 677.480716] ? lock_acquire+0x170/0x3c0 [ 677.484701] __should_failslab+0x115/0x180 [ 677.488939] should_failslab+0x5/0x10 [ 677.492745] kmem_cache_alloc+0x277/0x370 [ 677.496900] skb_clone+0x151/0x3d0 [ 677.500449] netlink_trim+0x1c8/0x250 [ 677.504258] netlink_broadcast_filtered+0x61/0xbc0 [ 677.509203] netlink_broadcast+0x35/0x40 [ 677.513273] rtnetlink_send+0xa4/0x100 [ 677.517167] qdisc_notify.isra.0+0x1cb/0x320 [ 677.521584] tc_modify_qdisc+0x1197/0x1a80 [ 677.525838] ? tc_get_qdisc+0xb60/0xb60 [ 677.529814] ? rtnetlink_rcv_msg+0x3fe/0xb80 [ 677.534256] ? tc_get_qdisc+0xb60/0xb60 [ 677.538236] rtnetlink_rcv_msg+0x453/0xb80 [ 677.542478] ? rtnl_calcit.isra.0+0x430/0x430 [ 677.546980] ? memcpy+0x35/0x50 [ 677.550263] ? netdev_pick_tx+0x2f0/0x2f0 [ 677.554411] ? __copy_skb_header+0x414/0x500 [ 677.558824] ? kfree_skbmem+0x140/0x140 [ 677.562806] netlink_rcv_skb+0x160/0x440 [ 677.566871] ? rtnl_calcit.isra.0+0x430/0x430 [ 677.571366] ? netlink_ack+0xae0/0xae0 [ 677.575271] netlink_unicast+0x4d5/0x690 [ 677.579342] ? netlink_sendskb+0x110/0x110 [ 677.583579] ? _copy_from_iter_full+0x229/0x7c0 [ 677.588255] ? __phys_addr_symbol+0x2c/0x70 [ 677.592580] ? __check_object_size+0x17b/0x3e0 [ 677.597171] netlink_sendmsg+0x6c3/0xc50 [ 677.601240] ? aa_af_perm+0x230/0x230 [ 677.605048] ? nlmsg_notify+0x1f0/0x1f0 [ 677.609030] ? kernel_recvmsg+0x220/0x220 [ 677.613201] ? nlmsg_notify+0x1f0/0x1f0 [ 677.617182] sock_sendmsg+0xc3/0x120 09:32:28 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3e, 0x2, 0x0) [ 677.620900] ___sys_sendmsg+0x7bb/0x8e0 [ 677.624879] ? copy_msghdr_from_user+0x440/0x440 [ 677.629641] ? __fget+0x32f/0x510 [ 677.633111] ? lock_downgrade+0x720/0x720 [ 677.637260] ? check_preemption_disabled+0x41/0x280 [ 677.642285] ? check_preemption_disabled+0x41/0x280 [ 677.647312] ? __fget+0x356/0x510 [ 677.650778] ? do_dup2+0x450/0x450 [ 677.654324] ? lock_downgrade+0x720/0x720 [ 677.658651] ? vfs_write+0x3d7/0x540 [ 677.662375] ? __fdget+0x1d0/0x230 [ 677.665927] __x64_sys_sendmsg+0x132/0x220 [ 677.670167] ? __sys_sendmsg+0x1b0/0x1b0 [ 677.674239] ? vfs_write+0x393/0x540 [ 677.677973] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 677.683345] ? trace_hardirqs_off_caller+0x6e/0x210 [ 677.688370] ? do_syscall_64+0x21/0x620 [ 677.692355] do_syscall_64+0xf9/0x620 [ 677.696166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.701357] RIP: 0033:0x7f6e9b735eb9 [ 677.705079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.723982] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.731690] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 677.738960] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 677.746227] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.753499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.760771] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 09:32:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) (fail_nth: 10) 09:32:28 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 34) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:28 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9d53e287189a86dd60c7d50400683a0000000000000000eb0000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000010000fe8000000000000000000000000000aa0006040300000000fe9c000000000000000000000000000100000000000005000000ffff00000000000000"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x2, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9d53e287189a86dd60c7d50400683a0000000000000000eb0000000000000000ff0200000000000000000000000000010100907800000000608894d800002f00fc010000000000000000000000010000fe8000000000000000000000000000aa0006040300000000fe9c000000000000000000000000000100000000000005000000ffff00000000000000"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') (async) pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) socket$inet6(0xa, 0x2, 0x10) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (async) 09:32:29 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec00000}}, 0x1c) 09:32:29 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:29 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c) [ 677.970730] FAULT_INJECTION: forcing a failure. [ 677.970730] name failslab, interval 1, probability 0, space 0, times 0 [ 678.000415] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.024304] CPU: 1 PID: 6317 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 678.032120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.041480] Call Trace: [ 678.044081] dump_stack+0x1fc/0x2ef [ 678.047724] should_fail.cold+0xa/0xf [ 678.049773] FAULT_INJECTION: forcing a failure. [ 678.049773] name failslab, interval 1, probability 0, space 0, times 0 [ 678.051533] ? setup_fault_attr+0x200/0x200 [ 678.051572] ? should_fail+0x142/0x7b0 [ 678.051595] __should_failslab+0x115/0x180 [ 678.051615] should_failslab+0x5/0x10 [ 678.051629] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 678.051651] __kmalloc_node+0x38/0x70 [ 678.087892] sbitmap_init_node+0x123/0x440 [ 678.092135] blk_mq_realloc_hw_ctxs+0x5db/0x1000 [ 678.096900] blk_mq_init_allocated_queue+0x20c/0x1300 [ 678.102093] ? blkcg_init_queue+0x1fd/0x540 [ 678.106428] blk_mq_init_queue+0x5c/0xa0 [ 678.110515] loop_add+0x2cb/0x8a0 [ 678.113982] loop_control_ioctl+0x16c/0x480 [ 678.118300] ? loop_lookup+0x1d0/0x1d0 [ 678.122194] ? HARDIRQ_verbose+0x10/0x10 [ 678.126264] ? ksys_write+0x241/0x2a0 [ 678.130073] ? loop_lookup+0x1d0/0x1d0 [ 678.133969] do_vfs_ioctl+0xcdb/0x12e0 [ 678.137862] ? lock_downgrade+0x720/0x720 [ 678.142016] ? check_preemption_disabled+0x41/0x280 [ 678.147045] ? ioctl_preallocate+0x200/0x200 [ 678.151472] ? __fget+0x356/0x510 [ 678.154931] ? do_dup2+0x450/0x450 [ 678.158480] ? vfs_write+0x393/0x540 [ 678.162197] ? fput+0x2b/0x190 [ 678.165398] ksys_ioctl+0x9b/0xc0 [ 678.168860] __x64_sys_ioctl+0x6f/0xb0 [ 678.172752] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 678.177338] do_syscall_64+0xf9/0x620 [ 678.181235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.186417] RIP: 0033:0x7fa68977eeb9 [ 678.190125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 678.209019] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.216734] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 678.224013] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 678.231278] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 678.238547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.245805] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 678.253090] CPU: 0 PID: 6319 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 678.260915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.275507] Call Trace: [ 678.278128] dump_stack+0x1fc/0x2ef [ 678.281800] should_fail.cold+0xa/0xf [ 678.285640] ? setup_fault_attr+0x200/0x200 [ 678.289992] ? HARDIRQ_verbose+0x10/0x10 [ 678.294087] ? __nla_reserve+0x9a/0xc0 [ 678.298020] __should_failslab+0x115/0x180 [ 678.302294] should_failslab+0x5/0x10 [ 678.306120] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 678.311191] __kmalloc_node_track_caller+0x38/0x70 [ 678.316155] pskb_expand_head+0x159/0xf20 [ 678.320357] netlink_trim+0x200/0x250 [ 678.324180] netlink_broadcast_filtered+0x61/0xbc0 [ 678.329166] netlink_broadcast+0x35/0x40 [ 678.333267] rtnetlink_send+0xa4/0x100 [ 678.337191] qdisc_notify.isra.0+0x1cb/0x320 [ 678.341634] tc_modify_qdisc+0x1197/0x1a80 [ 678.345929] ? tc_get_qdisc+0xb60/0xb60 [ 678.349943] ? rtnetlink_rcv_msg+0x3fe/0xb80 [ 678.354444] ? tc_get_qdisc+0xb60/0xb60 [ 678.358448] rtnetlink_rcv_msg+0x453/0xb80 [ 678.362720] ? rtnl_calcit.isra.0+0x430/0x430 [ 678.367251] ? memcpy+0x35/0x50 [ 678.370556] ? netdev_pick_tx+0x2f0/0x2f0 [ 678.374724] ? __copy_skb_header+0x414/0x500 [ 678.379160] ? kfree_skbmem+0x140/0x140 [ 678.383185] netlink_rcv_skb+0x160/0x440 [ 678.387280] ? rtnl_calcit.isra.0+0x430/0x430 [ 678.391812] ? netlink_ack+0xae0/0xae0 [ 678.395778] netlink_unicast+0x4d5/0x690 [ 678.399881] ? netlink_sendskb+0x110/0x110 [ 678.404143] ? _copy_from_iter_full+0x229/0x7c0 [ 678.408839] ? __phys_addr_symbol+0x2c/0x70 [ 678.413188] ? __check_object_size+0x17b/0x3e0 [ 678.417809] netlink_sendmsg+0x6c3/0xc50 [ 678.421910] ? aa_af_perm+0x230/0x230 [ 678.425747] ? nlmsg_notify+0x1f0/0x1f0 [ 678.429743] ? kernel_recvmsg+0x220/0x220 [ 678.434035] ? nlmsg_notify+0x1f0/0x1f0 [ 678.438042] sock_sendmsg+0xc3/0x120 [ 678.441788] ___sys_sendmsg+0x7bb/0x8e0 [ 678.445800] ? copy_msghdr_from_user+0x440/0x440 [ 678.450593] ? __fget+0x32f/0x510 [ 678.454092] ? lock_downgrade+0x720/0x720 [ 678.458266] ? check_preemption_disabled+0x41/0x280 [ 678.463311] ? check_preemption_disabled+0x41/0x280 [ 678.468371] ? __fget+0x356/0x510 [ 678.471854] ? do_dup2+0x450/0x450 [ 678.475408] ? lock_downgrade+0x720/0x720 [ 678.479590] ? vfs_write+0x3d7/0x540 [ 678.483348] ? __fdget+0x1d0/0x230 [ 678.486941] __x64_sys_sendmsg+0x132/0x220 [ 678.491202] ? __sys_sendmsg+0x1b0/0x1b0 [ 678.495287] ? vfs_write+0x393/0x540 [ 678.499057] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 678.504446] ? trace_hardirqs_off_caller+0x6e/0x210 [ 678.509490] ? do_syscall_64+0x21/0x620 [ 678.513499] do_syscall_64+0xf9/0x620 [ 678.517336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.522546] RIP: 0033:0x7f6e9b735eb9 09:32:29 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffaa8a}}, 0x1c) [ 678.526283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 678.545202] RSP: 002b:00007f6e9a0ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.552938] RAX: ffffffffffffffda RBX: 00007f6e9b848f60 RCX: 00007f6e9b735eb9 [ 678.560231] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 678.567517] RBP: 00007f6e9a0ab1d0 R08: 0000000000000000 R09: 0000000000000000 09:32:29 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff8d}}, 0x1c) 09:32:29 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x41, 0x2, 0x0) [ 678.574810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.582103] R13: 00007fff4e5a62ff R14: 00007f6e9a0ab300 R15: 0000000000022000 09:32:29 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 35) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:29 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x80d6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2c2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_names\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20}}}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 678.745155] FAULT_INJECTION: forcing a failure. [ 678.745155] name failslab, interval 1, probability 0, space 0, times 0 [ 678.759737] CPU: 1 PID: 6380 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 678.767560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.776918] Call Trace: [ 678.779520] dump_stack+0x1fc/0x2ef [ 678.783161] should_fail.cold+0xa/0xf [ 678.786968] ? setup_fault_attr+0x200/0x200 [ 678.791294] ? should_fail+0x142/0x7b0 [ 678.795196] __should_failslab+0x115/0x180 [ 678.799438] should_failslab+0x5/0x10 [ 678.803239] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 678.808346] __kmalloc_node+0x38/0x70 [ 678.812153] blk_alloc_flush_queue+0x120/0x300 [ 678.816741] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 678.821523] blk_mq_init_allocated_queue+0x20c/0x1300 [ 678.826720] ? blkcg_init_queue+0x1fd/0x540 [ 678.831058] blk_mq_init_queue+0x5c/0xa0 [ 678.835126] loop_add+0x2cb/0x8a0 [ 678.838586] loop_control_ioctl+0x16c/0x480 [ 678.842913] ? loop_lookup+0x1d0/0x1d0 [ 678.846809] ? HARDIRQ_verbose+0x10/0x10 [ 678.850876] ? ksys_write+0x241/0x2a0 [ 678.854690] ? loop_lookup+0x1d0/0x1d0 [ 678.858582] do_vfs_ioctl+0xcdb/0x12e0 [ 678.862478] ? lock_downgrade+0x720/0x720 [ 678.866625] ? check_preemption_disabled+0x41/0x280 [ 678.871643] ? ioctl_preallocate+0x200/0x200 [ 678.876059] ? __fget+0x356/0x510 [ 678.879529] ? do_dup2+0x450/0x450 [ 678.883074] ? vfs_write+0x393/0x540 [ 678.886891] ? fput+0x2b/0x190 [ 678.890096] ksys_ioctl+0x9b/0xc0 [ 678.893560] __x64_sys_ioctl+0x6f/0xb0 [ 678.897461] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 678.902052] do_syscall_64+0xf9/0x620 [ 678.905865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.911056] RIP: 0033:0x7fa68977eeb9 [ 678.914773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 678.933682] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:32:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfffffff5}}, 0x1c) 09:32:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 678.941396] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 678.948664] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 678.955940] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 678.963220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.970507] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:30 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 36) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 679.072519] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:30 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 679.122437] FAULT_INJECTION: forcing a failure. [ 679.122437] name failslab, interval 1, probability 0, space 0, times 0 [ 679.150314] CPU: 1 PID: 6395 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 679.158146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.167507] Call Trace: [ 679.170111] dump_stack+0x1fc/0x2ef [ 679.173756] should_fail.cold+0xa/0xf [ 679.177570] ? setup_fault_attr+0x200/0x200 [ 679.181905] ? lock_acquire+0x170/0x3c0 [ 679.185899] __should_failslab+0x115/0x180 [ 679.190143] should_failslab+0x5/0x10 [ 679.193949] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 679.199062] blk_mq_init_tags+0x6a/0x2b0 [ 679.203131] blk_mq_alloc_rq_map+0x9d/0x230 [ 679.207452] ? elevator_get+0x29/0x170 [ 679.211346] blk_mq_init_sched+0x219/0x730 [ 679.215595] elevator_init_mq+0xf0/0x180 [ 679.219661] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 679.224865] blk_mq_init_queue+0x5c/0xa0 [ 679.228937] loop_add+0x2cb/0x8a0 [ 679.232399] loop_control_ioctl+0x16c/0x480 [ 679.236728] ? loop_lookup+0x1d0/0x1d0 [ 679.240624] ? HARDIRQ_verbose+0x10/0x10 [ 679.244688] ? ksys_write+0x241/0x2a0 [ 679.248492] ? loop_lookup+0x1d0/0x1d0 [ 679.252387] do_vfs_ioctl+0xcdb/0x12e0 [ 679.256278] ? lock_downgrade+0x720/0x720 [ 679.260432] ? check_preemption_disabled+0x41/0x280 [ 679.265453] ? ioctl_preallocate+0x200/0x200 [ 679.269871] ? __fget+0x356/0x510 [ 679.273333] ? do_dup2+0x450/0x450 [ 679.276873] ? vfs_write+0x393/0x540 [ 679.280594] ? fput+0x2b/0x190 [ 679.283801] ksys_ioctl+0x9b/0xc0 [ 679.287260] __x64_sys_ioctl+0x6f/0xb0 [ 679.291151] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 679.295735] do_syscall_64+0xf9/0x620 [ 679.299548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.304742] RIP: 0033:0x7fa68977eeb9 09:32:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x100000000000000}}, 0x1c) [ 679.308456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.327358] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.335070] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 679.342340] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 679.349612] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.356888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.364158] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:30 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 37) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 679.436591] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:30 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x42, 0x2, 0x0) 09:32:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x1c) 09:32:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 679.563522] FAULT_INJECTION: forcing a failure. [ 679.563522] name failslab, interval 1, probability 0, space 0, times 0 [ 679.577255] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 679.614872] CPU: 1 PID: 6414 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 679.622689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.632042] Call Trace: [ 679.634641] dump_stack+0x1fc/0x2ef [ 679.638361] should_fail.cold+0xa/0xf [ 679.642165] ? should_fail+0x142/0x7b0 [ 679.646057] ? setup_fault_attr+0x200/0x200 [ 679.650394] __should_failslab+0x115/0x180 [ 679.654638] should_failslab+0x5/0x10 [ 679.658443] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 679.663559] blk_alloc_flush_queue+0x76/0x300 [ 679.668066] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 679.672847] blk_mq_init_allocated_queue+0x20c/0x1300 [ 679.678040] ? blkcg_init_queue+0x1fd/0x540 [ 679.682376] blk_mq_init_queue+0x5c/0xa0 [ 679.686441] loop_add+0x2cb/0x8a0 [ 679.689902] loop_control_ioctl+0x16c/0x480 [ 679.694228] ? loop_lookup+0x1d0/0x1d0 [ 679.698111] ? HARDIRQ_verbose+0x10/0x10 [ 679.702173] ? loop_lookup+0x1d0/0x1d0 [ 679.706064] do_vfs_ioctl+0xcdb/0x12e0 [ 679.709953] ? lock_downgrade+0x720/0x720 [ 679.714107] ? check_preemption_disabled+0x41/0x280 [ 679.719127] ? ioctl_preallocate+0x200/0x200 [ 679.723541] ? __fget+0x356/0x510 [ 679.726996] ? do_dup2+0x450/0x450 [ 679.730537] ? vfs_write+0x393/0x540 [ 679.734254] ? fput+0x2b/0x190 [ 679.737456] ksys_ioctl+0x9b/0xc0 [ 679.740919] __x64_sys_ioctl+0x6f/0xb0 [ 679.744816] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 679.749407] do_syscall_64+0xf9/0x620 [ 679.753214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.758403] RIP: 0033:0x7fa68977eeb9 [ 679.762118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.781016] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.788722] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 679.795991] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 679.803261] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 09:32:30 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x80d6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2c2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_names\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20}}}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:30 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 38) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 679.810528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.817793] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 679.877035] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 679.942212] FAULT_INJECTION: forcing a failure. [ 679.942212] name failslab, interval 1, probability 0, space 0, times 0 [ 679.960599] CPU: 1 PID: 6434 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 679.968417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.977772] Call Trace: [ 679.980371] dump_stack+0x1fc/0x2ef [ 679.984015] should_fail.cold+0xa/0xf [ 679.987830] ? setup_fault_attr+0x200/0x200 [ 679.992159] ? lock_acquire+0x170/0x3c0 [ 679.996150] __should_failslab+0x115/0x180 [ 680.000395] should_failslab+0x5/0x10 [ 680.004203] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 680.009326] sbitmap_queue_init_node+0x240/0x6c0 [ 680.014096] blk_mq_init_tags+0x10d/0x2b0 [ 680.018258] blk_mq_alloc_rq_map+0x9d/0x230 [ 680.022581] ? elevator_get+0x29/0x170 [ 680.026474] blk_mq_init_sched+0x219/0x730 [ 680.030728] elevator_init_mq+0xf0/0x180 [ 680.034800] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 680.040010] blk_mq_init_queue+0x5c/0xa0 [ 680.044075] loop_add+0x2cb/0x8a0 [ 680.047541] loop_control_ioctl+0x16c/0x480 [ 680.051871] ? loop_lookup+0x1d0/0x1d0 [ 680.055771] ? HARDIRQ_verbose+0x10/0x10 [ 680.059843] ? ksys_write+0x241/0x2a0 [ 680.063649] ? loop_lookup+0x1d0/0x1d0 [ 680.067542] do_vfs_ioctl+0xcdb/0x12e0 [ 680.071435] ? lock_downgrade+0x720/0x720 [ 680.075587] ? check_preemption_disabled+0x41/0x280 [ 680.080608] ? ioctl_preallocate+0x200/0x200 [ 680.085024] ? __fget+0x356/0x510 [ 680.088483] ? do_dup2+0x450/0x450 [ 680.092022] ? vfs_write+0x393/0x540 [ 680.095741] ? fput+0x2b/0x190 [ 680.098948] ksys_ioctl+0x9b/0xc0 [ 680.102409] __x64_sys_ioctl+0x6f/0xb0 [ 680.106300] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 680.110885] do_syscall_64+0xf9/0x620 [ 680.114696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.119888] RIP: 0033:0x7fa68977eeb9 [ 680.123603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.142503] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.150092] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.150210] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 680.150219] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 680.150227] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.150236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:31 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300000000000000}}, 0x1c) 09:32:31 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 39) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 680.150245] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:31 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 680.280080] FAULT_INJECTION: forcing a failure. [ 680.280080] name failslab, interval 1, probability 0, space 0, times 0 [ 680.299230] CPU: 1 PID: 6452 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 680.307054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.316407] Call Trace: [ 680.319004] dump_stack+0x1fc/0x2ef [ 680.322649] should_fail.cold+0xa/0xf [ 680.326461] ? setup_fault_attr+0x200/0x200 [ 680.330798] ? lock_acquire+0x170/0x3c0 [ 680.334787] __should_failslab+0x115/0x180 [ 680.339028] should_failslab+0x5/0x10 [ 680.342833] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 680.347942] sbitmap_queue_init_node+0x240/0x6c0 [ 680.352715] blk_mq_init_tags+0x16f/0x2b0 [ 680.356871] blk_mq_alloc_rq_map+0x9d/0x230 [ 680.361210] ? elevator_get+0x29/0x170 [ 680.365103] blk_mq_init_sched+0x219/0x730 [ 680.369351] elevator_init_mq+0xf0/0x180 [ 680.373425] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 680.378634] blk_mq_init_queue+0x5c/0xa0 [ 680.382702] loop_add+0x2cb/0x8a0 [ 680.386170] loop_control_ioctl+0x16c/0x480 [ 680.390500] ? loop_lookup+0x1d0/0x1d0 [ 680.394393] ? HARDIRQ_verbose+0x10/0x10 [ 680.398459] ? ksys_write+0x241/0x2a0 [ 680.402263] ? loop_lookup+0x1d0/0x1d0 [ 680.406159] do_vfs_ioctl+0xcdb/0x12e0 [ 680.410055] ? lock_downgrade+0x720/0x720 [ 680.414209] ? check_preemption_disabled+0x41/0x280 [ 680.419236] ? ioctl_preallocate+0x200/0x200 [ 680.423657] ? __fget+0x356/0x510 [ 680.427122] ? do_dup2+0x450/0x450 [ 680.430665] ? vfs_write+0x393/0x540 [ 680.434386] ? fput+0x2b/0x190 [ 680.437593] ksys_ioctl+0x9b/0xc0 [ 680.441053] __x64_sys_ioctl+0x6f/0xb0 [ 680.444948] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 680.449534] do_syscall_64+0xf9/0x620 [ 680.453342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.458528] RIP: 0033:0x7fa68977eeb9 [ 680.462243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:32:31 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x400000000000000}}, 0x1c) [ 680.481149] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.488877] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 680.496150] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 680.503420] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.510691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.517966] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:31 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x43, 0x2, 0x0) 09:32:31 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 40) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 680.628984] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 680.691032] FAULT_INJECTION: forcing a failure. [ 680.691032] name failslab, interval 1, probability 0, space 0, times 0 09:32:31 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x80d6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x2c2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_names\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async, rerun: 64) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r0, 0x400000001ffffffd) (rerun: 64) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20}}}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async, rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (rerun: 64) 09:32:31 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500000000000000}}, 0x1c) [ 680.749768] CPU: 0 PID: 6470 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 680.757622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.767001] Call Trace: [ 680.769622] dump_stack+0x1fc/0x2ef [ 680.773294] should_fail.cold+0xa/0xf [ 680.777120] ? setup_fault_attr+0x200/0x200 [ 680.781438] ? lock_acquire+0x170/0x3c0 [ 680.785421] __should_failslab+0x115/0x180 [ 680.789657] should_failslab+0x5/0x10 [ 680.793474] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 680.798614] __kmalloc_node+0x38/0x70 [ 680.802431] sbitmap_init_node+0x123/0x440 [ 680.806665] sbitmap_queue_init_node+0x37/0x6c0 [ 680.811334] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 680.816372] blk_mq_init_tags+0x10d/0x2b0 [ 680.820525] blk_mq_alloc_rq_map+0x9d/0x230 [ 680.824840] ? elevator_get+0x29/0x170 [ 680.828726] blk_mq_init_sched+0x219/0x730 [ 680.832970] elevator_init_mq+0xf0/0x180 [ 680.837030] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 680.842241] blk_mq_init_queue+0x5c/0xa0 [ 680.846314] loop_add+0x2cb/0x8a0 [ 680.849779] loop_control_ioctl+0x16c/0x480 [ 680.854094] ? loop_lookup+0x1d0/0x1d0 [ 680.857980] ? HARDIRQ_verbose+0x10/0x10 [ 680.862043] ? loop_lookup+0x1d0/0x1d0 [ 680.865938] do_vfs_ioctl+0xcdb/0x12e0 [ 680.869835] ? lock_downgrade+0x720/0x720 [ 680.873975] ? check_preemption_disabled+0x41/0x280 [ 680.879002] ? ioctl_preallocate+0x200/0x200 [ 680.883447] ? __fget+0x356/0x510 [ 680.886913] ? do_dup2+0x450/0x450 [ 680.890446] ? vfs_write+0x393/0x540 [ 680.894159] ? fput+0x2b/0x190 [ 680.897362] ksys_ioctl+0x9b/0xc0 [ 680.900816] __x64_sys_ioctl+0x6f/0xb0 [ 680.904698] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 680.909292] do_syscall_64+0xf9/0x620 [ 680.913106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.918291] RIP: 0033:0x7fa68977eeb9 [ 680.921996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.940900] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.948618] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 680.955887] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 680.963166] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.970432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.977710] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:32 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 41) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 681.064445] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x7, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:32 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600000000000000}}, 0x1c) [ 681.162080] FAULT_INJECTION: forcing a failure. [ 681.162080] name failslab, interval 1, probability 0, space 0, times 0 [ 681.193071] CPU: 0 PID: 6493 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 681.199503] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.200899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.200909] Call Trace: [ 681.200940] dump_stack+0x1fc/0x2ef [ 681.200977] should_fail.cold+0xa/0xf [ 681.201003] ? setup_fault_attr+0x200/0x200 [ 681.233293] ? __lockdep_init_map+0x100/0x5a0 [ 681.237807] __should_failslab+0x115/0x180 [ 681.242058] should_failslab+0x5/0x10 [ 681.245868] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 681.250998] __kmalloc_node+0x38/0x70 [ 681.254814] blk_mq_alloc_rq_map+0x120/0x230 [ 681.259227] ? elevator_get+0x29/0x170 [ 681.263115] blk_mq_init_sched+0x219/0x730 [ 681.267390] elevator_init_mq+0xf0/0x180 [ 681.271469] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 681.276672] blk_mq_init_queue+0x5c/0xa0 [ 681.280736] loop_add+0x2cb/0x8a0 [ 681.284212] loop_control_ioctl+0x16c/0x480 [ 681.288550] ? loop_lookup+0x1d0/0x1d0 [ 681.292438] ? HARDIRQ_verbose+0x10/0x10 [ 681.296495] ? ksys_write+0x241/0x2a0 [ 681.300305] ? loop_lookup+0x1d0/0x1d0 [ 681.304223] do_vfs_ioctl+0xcdb/0x12e0 [ 681.308135] ? lock_downgrade+0x720/0x720 [ 681.312290] ? check_preemption_disabled+0x41/0x280 [ 681.317333] ? ioctl_preallocate+0x200/0x200 [ 681.321754] ? __fget+0x356/0x510 [ 681.325209] ? do_dup2+0x450/0x450 [ 681.328744] ? vfs_write+0x393/0x540 [ 681.332475] ? fput+0x2b/0x190 [ 681.335690] ksys_ioctl+0x9b/0xc0 [ 681.339143] __x64_sys_ioctl+0x6f/0xb0 [ 681.343028] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 681.347603] do_syscall_64+0xf9/0x620 [ 681.351426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.356617] RIP: 0033:0x7fa68977eeb9 [ 681.360338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.379257] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.386962] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 681.394225] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 681.401503] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 09:32:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:32 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 681.408775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.416048] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:32 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 42) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:32 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x44, 0x2, 0x0) 09:32:32 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700000000000000}}, 0x1c) [ 681.556521] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.576689] FAULT_INJECTION: forcing a failure. [ 681.576689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:32:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x9, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 681.644255] CPU: 1 PID: 6509 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 681.652083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.661439] Call Trace: [ 681.664032] dump_stack+0x1fc/0x2ef [ 681.667715] should_fail.cold+0xa/0xf [ 681.671539] ? setup_fault_attr+0x200/0x200 [ 681.675878] __alloc_pages_nodemask+0x239/0x2890 [ 681.680644] ? kasan_kmalloc+0x139/0x160 [ 681.684712] ? __kmalloc_node+0x4c/0x70 [ 681.688693] ? blk_mq_alloc_rq_map+0x120/0x230 [ 681.693277] ? blk_mq_init_sched+0x219/0x730 [ 681.697687] ? elevator_init_mq+0xf0/0x180 [ 681.701928] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 681.707295] ? blk_mq_init_queue+0x5c/0xa0 [ 681.711536] ? loop_add+0x2cb/0x8a0 [ 681.715170] ? ksys_ioctl+0x9b/0xc0 [ 681.718794] ? __x64_sys_ioctl+0x6f/0xb0 [ 681.722856] ? do_syscall_64+0xf9/0x620 [ 681.726837] ? should_fail+0x142/0x7b0 [ 681.730721] ? fs_reclaim_release+0xd0/0x110 [ 681.735140] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.739983] ? setup_fault_attr+0x200/0x200 [ 681.744308] ? lock_acquire+0x170/0x3c0 [ 681.748290] ? check_preemption_disabled+0x41/0x280 [ 681.753311] ? should_fail+0x142/0x7b0 [ 681.757204] ? setup_fault_attr+0x200/0x200 [ 681.761527] ? __lockdep_init_map+0x100/0x5a0 [ 681.766021] ? find_next_bit+0x105/0x130 [ 681.770084] ? __cpu_to_node+0x7b/0xa0 [ 681.773977] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 681.778832] blk_mq_alloc_rqs+0x242/0x800 [ 681.783002] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 681.787496] blk_mq_init_sched+0x26c/0x730 [ 681.791739] elevator_init_mq+0xf0/0x180 [ 681.795809] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 681.801025] blk_mq_init_queue+0x5c/0xa0 [ 681.805104] loop_add+0x2cb/0x8a0 [ 681.808567] loop_control_ioctl+0x16c/0x480 [ 681.812891] ? loop_lookup+0x1d0/0x1d0 [ 681.816772] ? HARDIRQ_verbose+0x10/0x10 [ 681.820829] ? ksys_write+0x241/0x2a0 [ 681.824635] ? loop_lookup+0x1d0/0x1d0 [ 681.828529] do_vfs_ioctl+0xcdb/0x12e0 [ 681.832425] ? lock_downgrade+0x720/0x720 [ 681.836576] ? check_preemption_disabled+0x41/0x280 [ 681.841597] ? ioctl_preallocate+0x200/0x200 [ 681.846015] ? __fget+0x356/0x510 [ 681.849476] ? do_dup2+0x450/0x450 [ 681.853021] ? vfs_write+0x393/0x540 [ 681.856736] ? fput+0x2b/0x190 [ 681.859936] ksys_ioctl+0x9b/0xc0 [ 681.863393] __x64_sys_ioctl+0x6f/0xb0 [ 681.867281] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 681.871861] do_syscall_64+0xf9/0x620 [ 681.875663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.880851] RIP: 0033:0x7fa68977eeb9 [ 681.884565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.903462] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.911177] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 681.918531] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 681.925799] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.933071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:32:33 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8a00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4a8, 0x3}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 681.940336] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:33 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 43) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xa, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 682.069155] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:33 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x800000000000000}}, 0x1c) [ 682.131090] FAULT_INJECTION: forcing a failure. [ 682.131090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 682.168912] CPU: 1 PID: 6534 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 682.176737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.186093] Call Trace: [ 682.188694] dump_stack+0x1fc/0x2ef [ 682.192328] should_fail.cold+0xa/0xf [ 682.196139] ? setup_fault_attr+0x200/0x200 [ 682.200476] __alloc_pages_nodemask+0x239/0x2890 [ 682.205234] ? kasan_kmalloc+0x139/0x160 [ 682.209296] ? __kmalloc_node+0x4c/0x70 [ 682.213270] ? blk_mq_alloc_rq_map+0x120/0x230 [ 682.217849] ? blk_mq_init_sched+0x219/0x730 [ 682.222257] ? elevator_init_mq+0xf0/0x180 [ 682.226492] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 682.231860] ? blk_mq_init_queue+0x5c/0xa0 [ 682.236104] ? loop_add+0x2cb/0x8a0 [ 682.239735] ? ksys_ioctl+0x9b/0xc0 [ 682.243374] ? should_fail+0x142/0x7b0 [ 682.247258] ? fs_reclaim_release+0xd0/0x110 [ 682.251667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 682.256510] ? cache_alloc_refill+0x1da/0x340 [ 682.261034] ? cache_alloc_refill+0x95/0x340 [ 682.265449] ? setup_fault_attr+0x200/0x200 [ 682.269772] ? find_next_bit+0x105/0x130 [ 682.273839] ? __cpu_to_node+0x7b/0xa0 [ 682.277739] blk_mq_alloc_rqs+0x242/0x800 [ 682.281903] blk_mq_init_sched+0x26c/0x730 [ 682.286150] elevator_init_mq+0xf0/0x180 [ 682.290218] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 682.295423] blk_mq_init_queue+0x5c/0xa0 [ 682.299485] loop_add+0x2cb/0x8a0 [ 682.302943] loop_control_ioctl+0x16c/0x480 [ 682.307263] ? loop_lookup+0x1d0/0x1d0 [ 682.311153] ? HARDIRQ_verbose+0x10/0x10 [ 682.315213] ? ksys_write+0x241/0x2a0 [ 682.319019] ? loop_lookup+0x1d0/0x1d0 [ 682.322928] do_vfs_ioctl+0xcdb/0x12e0 [ 682.326816] ? lock_downgrade+0x720/0x720 [ 682.330970] ? check_preemption_disabled+0x41/0x280 [ 682.335989] ? ioctl_preallocate+0x200/0x200 [ 682.340400] ? __fget+0x356/0x510 [ 682.343855] ? do_dup2+0x450/0x450 [ 682.347395] ? vfs_write+0x393/0x540 [ 682.351107] ? fput+0x2b/0x190 [ 682.354304] ksys_ioctl+0x9b/0xc0 [ 682.357764] __x64_sys_ioctl+0x6f/0xb0 [ 682.361653] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 682.366237] do_syscall_64+0xf9/0x620 [ 682.370040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.375224] RIP: 0033:0x7fa68977eeb9 [ 682.378925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.397808] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.405502] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 682.412757] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 682.420013] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 09:32:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 682.427271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.434530] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:33 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x45, 0x2, 0x0) 09:32:33 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 44) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:33 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:33 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x900000000000000}}, 0x1c) 09:32:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 682.664755] FAULT_INJECTION: forcing a failure. [ 682.664755] name failslab, interval 1, probability 0, space 0, times 0 [ 682.688885] CPU: 1 PID: 6560 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 682.696701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.706055] Call Trace: [ 682.708653] dump_stack+0x1fc/0x2ef [ 682.712297] should_fail.cold+0xa/0xf [ 682.716110] ? setup_fault_attr+0x200/0x200 [ 682.720437] ? lock_acquire+0x170/0x3c0 [ 682.724429] __should_failslab+0x115/0x180 [ 682.728671] should_failslab+0x5/0x10 [ 682.732485] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 682.737605] elevator_alloc+0x7a/0x200 [ 682.741510] dd_init_queue+0x20/0x430 [ 682.745323] blk_mq_init_sched+0x395/0x730 [ 682.749576] elevator_init_mq+0xf0/0x180 [ 682.753652] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 682.758865] blk_mq_init_queue+0x5c/0xa0 [ 682.762933] loop_add+0x2cb/0x8a0 [ 682.766400] loop_control_ioctl+0x16c/0x480 [ 682.770724] ? loop_lookup+0x1d0/0x1d0 [ 682.774617] ? HARDIRQ_verbose+0x10/0x10 [ 682.778676] ? ksys_write+0x241/0x2a0 [ 682.782487] ? loop_lookup+0x1d0/0x1d0 [ 682.786379] do_vfs_ioctl+0xcdb/0x12e0 [ 682.790277] ? lock_downgrade+0x720/0x720 [ 682.794429] ? check_preemption_disabled+0x41/0x280 [ 682.799450] ? ioctl_preallocate+0x200/0x200 [ 682.803875] ? __fget+0x356/0x510 [ 682.807335] ? do_dup2+0x450/0x450 [ 682.810881] ? vfs_write+0x393/0x540 [ 682.814605] ? fput+0x2b/0x190 [ 682.817814] ksys_ioctl+0x9b/0xc0 [ 682.821275] __x64_sys_ioctl+0x6f/0xb0 [ 682.825165] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 682.829751] do_syscall_64+0xf9/0x620 [ 682.833560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.838755] RIP: 0033:0x7fa68977eeb9 [ 682.842477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:32:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xe, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:34 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xa00000000000000}}, 0x1c) 09:32:34 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8a00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4a8, 0x3}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r0, 0x400000001ffffffd) (async, rerun: 64) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async, rerun: 32) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async, rerun: 32) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 682.861377] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.869091] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 682.876366] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 682.883637] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.890901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.898169] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:34 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 45) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:34 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00000000000000}}, 0x1c) 09:32:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 683.109207] FAULT_INJECTION: forcing a failure. [ 683.109207] name failslab, interval 1, probability 0, space 0, times 0 [ 683.142698] CPU: 0 PID: 6587 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 09:32:34 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000000000000000}}, 0x1c) [ 683.150547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.159924] Call Trace: [ 683.162541] dump_stack+0x1fc/0x2ef [ 683.166226] should_fail.cold+0xa/0xf [ 683.170059] ? setup_fault_attr+0x200/0x200 [ 683.174398] ? lock_acquire+0x170/0x3c0 [ 683.178418] __should_failslab+0x115/0x180 [ 683.182670] should_failslab+0x5/0x10 [ 683.186469] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 683.191661] dd_init_queue+0x94/0x430 [ 683.195467] blk_mq_init_sched+0x395/0x730 [ 683.199735] elevator_init_mq+0xf0/0x180 [ 683.203794] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 683.209012] blk_mq_init_queue+0x5c/0xa0 [ 683.213074] loop_add+0x2cb/0x8a0 [ 683.216527] loop_control_ioctl+0x16c/0x480 [ 683.220848] ? loop_lookup+0x1d0/0x1d0 [ 683.224733] ? HARDIRQ_verbose+0x10/0x10 [ 683.228820] ? loop_lookup+0x1d0/0x1d0 [ 683.232736] do_vfs_ioctl+0xcdb/0x12e0 [ 683.236628] ? lock_downgrade+0x720/0x720 [ 683.240774] ? check_preemption_disabled+0x41/0x280 [ 683.245787] ? ioctl_preallocate+0x200/0x200 [ 683.250200] ? __fget+0x356/0x510 [ 683.253655] ? do_dup2+0x450/0x450 [ 683.257190] ? vfs_write+0x393/0x540 [ 683.260923] ? fput+0x2b/0x190 [ 683.264150] ksys_ioctl+0x9b/0xc0 [ 683.267617] __x64_sys_ioctl+0x6f/0xb0 [ 683.271500] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 683.276097] do_syscall_64+0xf9/0x620 [ 683.279914] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.285096] RIP: 0033:0x7fa68977eeb9 [ 683.288803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.307697] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.315409] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 683.322686] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 683.329956] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.337216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.344478] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:34 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x46, 0x2, 0x0) 09:32:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:34 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:34 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 46) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x48, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:34 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}, 0x1c) 09:32:34 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8a00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4a8, 0x3}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) (async) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r0, 0x400000001ffffffd) (async, rerun: 64) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async, rerun: 64) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async, rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 683.907156] FAULT_INJECTION: forcing a failure. [ 683.907156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 683.946929] CPU: 1 PID: 6620 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 09:32:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x4c, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 683.954747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.964364] Call Trace: [ 683.966964] dump_stack+0x1fc/0x2ef [ 683.970605] should_fail.cold+0xa/0xf [ 683.974419] ? setup_fault_attr+0x200/0x200 [ 683.978759] __alloc_pages_nodemask+0x239/0x2890 [ 683.983530] ? kasan_kmalloc+0x139/0x160 [ 683.987602] ? __kmalloc_node+0x4c/0x70 [ 683.991582] ? blk_mq_alloc_rq_map+0x120/0x230 [ 683.996172] ? blk_mq_init_sched+0x219/0x730 [ 684.000584] ? elevator_init_mq+0xf0/0x180 [ 684.004828] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 684.010196] ? blk_mq_init_queue+0x5c/0xa0 [ 684.014434] ? loop_add+0x2cb/0x8a0 [ 684.018069] ? ksys_ioctl+0x9b/0xc0 [ 684.021707] ? lock_acquire+0x170/0x3c0 [ 684.025689] ? cache_alloc_refill+0x95/0x340 [ 684.030107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 684.034950] ? setup_fault_attr+0x200/0x200 [ 684.039277] ? check_preemption_disabled+0x41/0x280 [ 684.044301] ? should_fail+0x142/0x7b0 [ 684.048194] ? setup_fault_attr+0x200/0x200 [ 684.052521] ? __lockdep_init_map+0x100/0x5a0 [ 684.057011] ? find_next_bit+0x105/0x130 [ 684.061068] ? __cpu_to_node+0x7b/0xa0 [ 684.064952] blk_mq_alloc_rqs+0x242/0x800 [ 684.069106] blk_mq_init_sched+0x26c/0x730 [ 684.073338] elevator_init_mq+0xf0/0x180 [ 684.077383] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 684.082565] blk_mq_init_queue+0x5c/0xa0 [ 684.086615] loop_add+0x2cb/0x8a0 [ 684.090053] loop_control_ioctl+0x16c/0x480 [ 684.094366] ? loop_lookup+0x1d0/0x1d0 [ 684.098255] ? HARDIRQ_verbose+0x10/0x10 [ 684.102308] ? ksys_write+0x241/0x2a0 [ 684.106093] ? loop_lookup+0x1d0/0x1d0 [ 684.109974] do_vfs_ioctl+0xcdb/0x12e0 [ 684.113863] ? lock_downgrade+0x720/0x720 [ 684.118006] ? check_preemption_disabled+0x41/0x280 [ 684.123016] ? ioctl_preallocate+0x200/0x200 [ 684.127414] ? __fget+0x356/0x510 [ 684.130874] ? do_dup2+0x450/0x450 [ 684.134405] ? vfs_write+0x393/0x540 [ 684.138125] ? fput+0x2b/0x190 [ 684.141311] ksys_ioctl+0x9b/0xc0 [ 684.144752] __x64_sys_ioctl+0x6f/0xb0 [ 684.148621] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 684.153184] do_syscall_64+0xf9/0x620 [ 684.156985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.162179] RIP: 0033:0x7fa68977eeb9 [ 684.165886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.184765] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.192466] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 684.199733] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 09:32:35 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:35 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5800000000000000}}, 0x1c) [ 684.206995] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.214244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.221501] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:35 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 47) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:35 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x47, 0x2, 0x0) [ 684.354917] nla_parse: 7 callbacks suppressed [ 684.354927] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:35 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 684.474300] FAULT_INJECTION: forcing a failure. [ 684.474300] name failslab, interval 1, probability 0, space 0, times 0 [ 684.493878] CPU: 1 PID: 6654 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 684.501698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.511056] Call Trace: [ 684.513657] dump_stack+0x1fc/0x2ef [ 684.517301] should_fail.cold+0xa/0xf [ 684.521121] ? setup_fault_attr+0x200/0x200 [ 684.525449] ? lock_acquire+0x170/0x3c0 [ 684.529442] __should_failslab+0x115/0x180 [ 684.533689] should_failslab+0x5/0x10 [ 684.537493] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 684.542601] dd_init_queue+0x94/0x430 [ 684.546407] blk_mq_init_sched+0x395/0x730 [ 684.550653] elevator_init_mq+0xf0/0x180 [ 684.554721] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 684.559933] blk_mq_init_queue+0x5c/0xa0 [ 684.564001] loop_add+0x2cb/0x8a0 [ 684.567463] loop_control_ioctl+0x16c/0x480 [ 684.571786] ? loop_lookup+0x1d0/0x1d0 [ 684.575683] ? HARDIRQ_verbose+0x10/0x10 [ 684.579750] ? ksys_write+0x241/0x2a0 [ 684.583560] ? loop_lookup+0x1d0/0x1d0 [ 684.587456] do_vfs_ioctl+0xcdb/0x12e0 [ 684.591352] ? lock_downgrade+0x720/0x720 [ 684.595505] ? check_preemption_disabled+0x41/0x280 [ 684.600526] ? ioctl_preallocate+0x200/0x200 [ 684.604940] ? __fget+0x356/0x510 [ 684.608400] ? do_dup2+0x450/0x450 [ 684.611941] ? vfs_write+0x393/0x540 [ 684.615660] ? fput+0x2b/0x190 [ 684.618863] ksys_ioctl+0x9b/0xc0 [ 684.622321] __x64_sys_ioctl+0x6f/0xb0 [ 684.626209] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 684.630793] do_syscall_64+0xf9/0x620 [ 684.634606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.639809] RIP: 0033:0x7fa68977eeb9 [ 684.643525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.662426] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:32:35 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:35 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000000000000000}}, 0x1c) [ 684.670136] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 684.677404] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 684.684674] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.691939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.699209] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:35 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 48) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:35 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000020010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe020000000000000000000000000001fc0200"/158], 0x0) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x68, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 684.849158] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.886443] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.924124] FAULT_INJECTION: forcing a failure. [ 684.924124] name failslab, interval 1, probability 0, space 0, times 0 [ 684.939814] CPU: 1 PID: 6676 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 684.947628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.956981] Call Trace: [ 684.959576] dump_stack+0x1fc/0x2ef [ 684.963219] should_fail.cold+0xa/0xf [ 684.967033] ? setup_fault_attr+0x200/0x200 [ 684.971365] ? lock_acquire+0x170/0x3c0 [ 684.975350] __should_failslab+0x115/0x180 [ 684.979594] should_failslab+0x5/0x10 [ 684.983401] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 684.988511] dd_init_queue+0x94/0x430 [ 684.992321] blk_mq_init_sched+0x395/0x730 [ 684.996569] elevator_init_mq+0xf0/0x180 [ 685.000640] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 685.005862] blk_mq_init_queue+0x5c/0xa0 [ 685.009931] loop_add+0x2cb/0x8a0 [ 685.013397] loop_control_ioctl+0x16c/0x480 [ 685.017731] ? loop_lookup+0x1d0/0x1d0 [ 685.021626] ? HARDIRQ_verbose+0x10/0x10 [ 685.025697] ? ksys_write+0x241/0x2a0 [ 685.029500] ? loop_lookup+0x1d0/0x1d0 [ 685.033390] do_vfs_ioctl+0xcdb/0x12e0 [ 685.037280] ? lock_downgrade+0x720/0x720 [ 685.041438] ? check_preemption_disabled+0x41/0x280 [ 685.046457] ? ioctl_preallocate+0x200/0x200 [ 685.051313] ? __fget+0x356/0x510 [ 685.054780] ? do_dup2+0x450/0x450 [ 685.058319] ? vfs_write+0x393/0x540 [ 685.062036] ? fput+0x2b/0x190 [ 685.065240] ksys_ioctl+0x9b/0xc0 [ 685.068700] __x64_sys_ioctl+0x6f/0xb0 [ 685.072595] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.077179] do_syscall_64+0xf9/0x620 [ 685.080988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.086178] RIP: 0033:0x7fa68977eeb9 [ 685.089891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.108799] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.116507] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:36 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8aaaffff00000000}}, 0x1c) [ 685.123783] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 685.131057] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.138332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.145605] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:36 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 49) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x74, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 685.223393] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:36 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x48, 0x2, 0x0) [ 685.311329] FAULT_INJECTION: forcing a failure. [ 685.311329] name failslab, interval 1, probability 0, space 0, times 0 [ 685.332388] CPU: 1 PID: 6691 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 685.340210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.349569] Call Trace: [ 685.352166] dump_stack+0x1fc/0x2ef [ 685.355807] should_fail.cold+0xa/0xf [ 685.359618] ? setup_fault_attr+0x200/0x200 [ 685.363951] ? lock_acquire+0x170/0x3c0 [ 685.367955] __should_failslab+0x115/0x180 [ 685.372199] should_failslab+0x5/0x10 [ 685.376011] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 685.381123] __alloc_disk_node+0x69/0x410 [ 685.385277] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.389867] loop_add+0x39c/0x8a0 [ 685.393330] loop_control_ioctl+0x16c/0x480 [ 685.397655] ? loop_lookup+0x1d0/0x1d0 [ 685.401547] ? HARDIRQ_verbose+0x10/0x10 [ 685.405614] ? ksys_write+0x241/0x2a0 [ 685.409416] ? loop_lookup+0x1d0/0x1d0 [ 685.413307] do_vfs_ioctl+0xcdb/0x12e0 [ 685.417200] ? lock_downgrade+0x720/0x720 [ 685.421353] ? check_preemption_disabled+0x41/0x280 [ 685.426378] ? ioctl_preallocate+0x200/0x200 [ 685.430801] ? __fget+0x356/0x510 [ 685.434261] ? do_dup2+0x450/0x450 [ 685.437804] ? vfs_write+0x393/0x540 [ 685.441525] ? fput+0x2b/0x190 [ 685.444742] ksys_ioctl+0x9b/0xc0 [ 685.448208] __x64_sys_ioctl+0x6f/0xb0 [ 685.450169] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.452097] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.452113] do_syscall_64+0xf9/0x620 [ 685.452135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.452148] RIP: 0033:0x7fa68977eeb9 [ 685.452163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.452171] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.452186] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 09:32:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:36 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8dffffff00000000}}, 0x1c) [ 685.452194] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 685.452202] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.452214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.533747] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 09:32:36 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:36 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe803000000000000}}, 0x1c) 09:32:36 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 50) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 685.672578] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.796078] FAULT_INJECTION: forcing a failure. [ 685.796078] name failslab, interval 1, probability 0, space 0, times 0 [ 685.808572] CPU: 0 PID: 6716 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 685.816408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.825774] Call Trace: [ 685.828361] dump_stack+0x1fc/0x2ef [ 685.831990] should_fail.cold+0xa/0xf [ 685.835797] ? setup_fault_attr+0x200/0x200 [ 685.840118] ? lock_acquire+0x170/0x3c0 [ 685.844104] __should_failslab+0x115/0x180 [ 685.848339] should_failslab+0x5/0x10 [ 685.852131] kmem_cache_alloc_trace+0x284/0x380 [ 685.856808] rand_initialize_disk+0x3b/0xc0 [ 685.861128] __alloc_disk_node+0x234/0x410 [ 685.865360] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.869939] loop_add+0x39c/0x8a0 [ 685.873394] loop_control_ioctl+0x16c/0x480 [ 685.877715] ? loop_lookup+0x1d0/0x1d0 [ 685.881607] ? HARDIRQ_verbose+0x10/0x10 [ 685.885673] ? loop_lookup+0x1d0/0x1d0 [ 685.889556] do_vfs_ioctl+0xcdb/0x12e0 [ 685.893441] ? lock_downgrade+0x720/0x720 [ 685.897584] ? check_preemption_disabled+0x41/0x280 [ 685.902617] ? ioctl_preallocate+0x200/0x200 [ 685.907069] ? __fget+0x356/0x510 [ 685.910531] ? do_dup2+0x450/0x450 [ 685.914072] ? vfs_write+0x393/0x540 [ 685.917782] ? fput+0x2b/0x190 [ 685.920985] ksys_ioctl+0x9b/0xc0 [ 685.924436] __x64_sys_ioctl+0x6f/0xb0 [ 685.928359] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.932936] do_syscall_64+0xf9/0x620 [ 685.936735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.941917] RIP: 0033:0x7fa68977eeb9 [ 685.945666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.964572] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.972277] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 685.979544] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 685.986806] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 09:32:37 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000020010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe020000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 64) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async, rerun: 64) r3 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) (async) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async, rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) (rerun: 64) 09:32:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf401000000000000}}, 0x1c) [ 685.994070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.001338] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 686.060994] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:37 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x5a0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) (fail_nth: 51) unshare(0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x10, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:32:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x174, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) 09:32:37 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924925a9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x49, 0x2, 0x0) [ 686.301209] FAULT_INJECTION: forcing a failure. [ 686.301209] name failslab, interval 1, probability 0, space 0, times 0 [ 686.321965] netlink: 336 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.384269] CPU: 0 PID: 6745 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 686.392124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.401496] Call Trace: [ 686.404111] dump_stack+0x1fc/0x2ef [ 686.407779] should_fail.cold+0xa/0xf [ 686.411619] ? setup_fault_attr+0x200/0x200 [ 686.415967] ? lock_acquire+0x170/0x3c0 [ 686.419996] __should_failslab+0x115/0x180 [ 686.424264] should_failslab+0x5/0x10 [ 686.428088] kmem_cache_alloc_trace+0x284/0x380 09:32:37 executing program 2: socket$inet6(0xa, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c) [ 686.432795] device_create_groups_vargs+0x8a/0x270 [ 686.437765] device_create+0xdf/0x120 [ 686.441602] ? device_create_vargs+0x50/0x50 [ 686.446054] ? pointer+0x850/0x850 [ 686.449654] bdi_register_va.part.0+0x4c/0x750 [ 686.454273] bdi_register+0x12a/0x140 [ 686.458098] ? bdi_register_va+0x80/0x80 [ 686.462202] ? vsnprintf+0x2cc/0x14f0 [ 686.466053] bdi_register_owner+0x59/0x100 [ 686.470317] __device_add_disk+0xd58/0x10c0 [ 686.474680] ? sprintf+0xc0/0x100 [ 686.478162] ? blk_alloc_devt+0x2d0/0x2d0 09:32:37 executing program 0: syz_emit_ethernet(0x9e, &(0x7f0000000140)={@multicast, @random="7e9de287189a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c7d504", 0x68, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8894d8", 0x0, 0x2f, 0x0, @private1, @local, [@srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x0, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) [ 686.482351] ? __raw_spin_lock_init+0x28/0x100 [ 686.486970] ? __lockdep_init_map+0x100/0x5a0 [ 686.491512] loop_add+0x628/0x8a0 [ 686.494986] loop_control_ioctl+0x16c/0x480 [ 686.499309] ? loop_lookup+0x1d0/0x1d0 [ 686.503194] ? HARDIRQ_verbose+0x10/0x10 [ 686.507283] ? loop_lookup+0x1d0/0x1d0 [ 686.511209] do_vfs_ioctl+0xcdb/0x12e0 [ 686.515124] ? lock_downgrade+0x720/0x720 [ 686.519282] ? check_preemption_disabled+0x41/0x280 [ 686.524308] ? ioctl_preallocate+0x200/0x200 [ 686.528718] ? __fget+0x356/0x510 [ 686.532171] ? do_dup2+0x450/0x450 [ 686.535718] ? vfs_write+0x393/0x540 [ 686.539460] ? fput+0x2b/0x190 [ 686.542675] ksys_ioctl+0x9b/0xc0 [ 686.546133] __x64_sys_ioctl+0x6f/0xb0 [ 686.550023] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 686.554598] do_syscall_64+0xf9/0x620 [ 686.558397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 686.563585] RIP: 0033:0x7fa68977eeb9 09:32:37 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e9de287189a86dd60c7d50400683a0000000000000000000000000000000000ff0200000000000000000000000020010100907800000000608894d800002f00fc010000000000000000000000000000fe8000000000000000000000000000aa0006040300000000fe880000000000000000000000000001fe020000000000000000000000000001fc0200"/158], 0x0) (async) semop(0x0, &(0x7f0000000100)=[{}, {}, {}], 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x1000}, {0x3, 0xae, 0x800}, {0x0, 0x20, 0x1000}, {0x1, 0x7b}, {0x2, 0x2, 0x1000}], 0x5, &(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0xbe6) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r1, &(0x7f00000191c0)=""/102397, 0x18ffd, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x2, 0xffff, 0x1, 0x7, 0xe1}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r0, 0x400000001ffffffd) (async) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xd42}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r4) (async) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) connect(r2, &(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=""/133) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) 09:32:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a801000024000b00000000000000030000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000780102000000000000000000000000000000000000000000000000000b0002"], 0x1a8}}, 0x0) [ 686.567290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.586201] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.593919] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 686.601195] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 686.608454] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.615717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.622977] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 686.665037] ------------[ cut here ]------------ [ 686.671212] WARNING: CPU: 1 PID: 6745 at block/genhd.c:719 __device_add_disk.cold+0x69/0x188 [ 686.679797] Kernel panic - not syncing: panic_on_warn set ... [ 686.679797] [ 686.687168] CPU: 1 PID: 6745 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 686.694952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.704292] Call Trace: [ 686.706886] dump_stack+0x1fc/0x2ef [ 686.710519] panic+0x26a/0x50e [ 686.713718] ? __warn_printk+0xf3/0xf3 [ 686.717602] ? __device_add_disk.cold+0x69/0x188 [ 686.722353] ? __probe_kernel_read+0x130/0x1b0 [ 686.726936] ? __warn.cold+0x5/0x5a [ 686.730583] ? __device_add_disk.cold+0x69/0x188 [ 686.735344] __warn.cold+0x20/0x5a [ 686.738886] ? io_schedule_timeout+0x140/0x140 [ 686.743470] ? __device_add_disk.cold+0x69/0x188 [ 686.748227] report_bug+0x262/0x2b0 [ 686.751862] do_error_trap+0x1d7/0x310 [ 686.755754] ? math_error+0x310/0x310 [ 686.759563] ? __irq_work_queue_local+0x101/0x160 [ 686.764410] ? irq_work_queue+0x29/0x80 [ 686.768388] ? error_entry+0x72/0xd0 [ 686.772111] ? trace_hardirqs_off_caller+0x6e/0x210 [ 686.777156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 686.782018] invalid_op+0x14/0x20 [ 686.785477] RIP: 0010:__device_add_disk.cold+0x69/0x188 [ 686.790839] Code: 02 84 c0 74 08 3c 03 0f 8e a8 00 00 00 44 8b a5 f0 05 00 00 e9 67 ad 6a fb e8 05 45 66 f9 48 c7 c7 60 75 b2 88 e8 64 76 f7 ff <0f> 0b e9 8f b9 6a fb e8 ed 44 66 f9 48 c7 c7 60 75 b2 88 e8 4c 76 [ 686.809740] RSP: 0018:ffff888238d6fb38 EFLAGS: 00010286 [ 686.815105] RAX: 0000000000000024 RBX: 0000000000000001 RCX: 0000000000000000 [ 686.822380] RDX: 0000000000040000 RSI: ffffffff814dff01 RDI: ffffed10471adf59 [ 686.829652] RBP: ffff88803bb4a540 R08: 0000000000000024 R09: 0000000000000000 [ 686.836921] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88803bb4a5d0 [ 686.844192] R13: ffff88803bb4abd0 R14: 00000000fffffff4 R15: ffff88803bb4a544 [ 686.851483] ? vprintk_func+0x81/0x180 [ 686.855377] ? __device_add_disk.cold+0x69/0x188 [ 686.860143] ? sprintf+0xc0/0x100 [ 686.863602] ? blk_alloc_devt+0x2d0/0x2d0 [ 686.867744] ? __raw_spin_lock_init+0x28/0x100 [ 686.872321] ? __lockdep_init_map+0x100/0x5a0 [ 686.876826] loop_add+0x628/0x8a0 [ 686.880289] loop_control_ioctl+0x16c/0x480 [ 686.884649] ? loop_lookup+0x1d0/0x1d0 [ 686.888552] ? HARDIRQ_verbose+0x10/0x10 [ 686.892618] ? loop_lookup+0x1d0/0x1d0 [ 686.896521] do_vfs_ioctl+0xcdb/0x12e0 [ 686.900424] ? lock_downgrade+0x720/0x720 [ 686.904577] ? check_preemption_disabled+0x41/0x280 [ 686.909597] ? ioctl_preallocate+0x200/0x200 [ 686.912840] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.914011] ? __fget+0x356/0x510 [ 686.919657] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.922986] ? do_dup2+0x450/0x450 [ 686.932044] ? vfs_write+0x393/0x540 [ 686.935763] ? fput+0x2b/0x190 [ 686.938965] ksys_ioctl+0x9b/0xc0 [ 686.942420] __x64_sys_ioctl+0x6f/0xb0 [ 686.946309] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 686.950890] do_syscall_64+0xf9/0x620 [ 686.954696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 686.959887] RIP: 0033:0x7fa68977eeb9 [ 686.963605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.982507] RSP: 002b:00007fa6880f4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.990226] RAX: ffffffffffffffda RBX: 00007fa689891f60 RCX: 00007fa68977eeb9 [ 686.997499] RDX: 000000000000000b RSI: 0000000000004c80 RDI: 0000000000000003 [ 687.004773] RBP: 00007fa6880f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.012043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.019310] R13: 00007ffc497425cf R14: 00007fa6880f4300 R15: 0000000000022000 [ 687.026981] Kernel Offset: disabled [ 687.030695] Rebooting in 86400 seconds..